CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2017-5911

The Banco Santander Mexico SA Supermovil app 3.5 through 3.7 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 32.1%

CVSS Severity

CVSS v3 Score 5.9

CVSS v2 Score 4.3

References

https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f
https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f

Products affected by CVE-2017-5911

Banco Santander Mexico Sa » Supermovil » Version: 3.5

cpe:2.3:a:banco_santander_mexico_sa:supermovil:3.5
Banco Santander Mexico Sa » Supermovil » Version: 3.6

cpe:2.3:a:banco_santander_mexico_sa:supermovil:3.6
Banco Santander Mexico Sa » Supermovil » Version: 3.7

cpe:2.3:a:banco_santander_mexico_sa:supermovil:3.7

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-5911

Products

Pricing

Contact Us