CVE-2014-5747: Medium severity xfinity vulnerability
The XFINITY Constant Guard Mobile (aka com.whitesky.mobile.android) application 3.1.140603 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-5747?
CVE-2014-5747 is considered a high severity vulnerability due to its potential to allow man-in-the-middle attacks.
How do I fix CVE-2014-5747?
To fix CVE-2014-5747, update the XFINITY Constant Guard Mobile application to a version that properly verifies X.509 certificates.
What type of attacks does CVE-2014-5747 allow?
CVE-2014-5747 allows man-in-the-middle attacks where attackers can spoof servers and intercept sensitive information.
Which application is affected by CVE-2014-5747?
CVE-2014-5747 affects the XFINITY Constant Guard Mobile application version 3.1.140603 for Android.
What information can be compromised due to CVE-2014-5747?
CVE-2014-5747 can lead to the compromise of sensitive information transmitted between the application and spoofed servers.