CVE-2016-1519: Medium severity grandstream wave vulnerability
The com.softphone.common package in the Grandstream Wave app 1.0.1.26 and earlier for Android does not properly validate SSL certificates, which allows man-in-the-middle attackers to spoof the Grandstream provisioning server via a crafted certificate.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1519?
CVE-2016-1519 is classified as a high severity vulnerability due to its potential for man-in-the-middle attacks.
How do I fix CVE-2016-1519?
To mitigate CVE-2016-1519, update the Grandstream Wave app to version 1.0.1.27 or later, where SSL certificate validation is properly implemented.
What is affected by CVE-2016-1519?
CVE-2016-1519 affects the Grandstream Wave app version 1.0.1.26 and earlier for Android devices.
What type of attacks can CVE-2016-1519 lead to?
CVE-2016-1519 can lead to man-in-the-middle attacks, allowing attackers to spoof the Grandstream provisioning server.
Is CVE-2016-1519 specific to certain devices?
CVE-2016-1519 is specifically associated with the Android platform and the Grandstream Wave application.