Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2017-14709

The komoot GmbH "Komoot - Cycling & Hiking Maps" app before 9.3.2 -- aka komoot-cycling-hiking-maps/id447374873 -- for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 31.5%
CVSS Severity
CVSS v3 Score 7.4
CVSS v2 Score 5.8
Products affected by CVE-2017-14709
  • Komoot » Komoot » Version: 9.0.1
    cpe:2.3:a:komoot:komoot:9.0.1
  • Komoot » Komoot » Version: 9.1
    cpe:2.3:a:komoot:komoot:9.1
  • Komoot » Komoot » Version: 9.1.1
    cpe:2.3:a:komoot:komoot:9.1.1
  • Komoot » Komoot » Version: 9.1.2
    cpe:2.3:a:komoot:komoot:9.1.2
  • Komoot » Komoot » Version: 9.3
    cpe:2.3:a:komoot:komoot:9.3
  • Komoot » Komoot » Version: 9.3.1
    cpe:2.3:a:komoot:komoot:9.3.1


Products
Pricing
Contact Us

Shodan ® - All rights reserved