CVE-2016-1520: High severity grandstream wave vulnerability
Published Apr 21, 2017
·Updated
The Grandstream Wave app 1.0.1.26 and earlier for Android does not use HTTPS when retrieving update information, which might allow man-in-the-middle attackers to execute arbitrary code via a crafted application.
Affected Software
1 affected component
Grandstream Wave Android<=1.0.1.26
Event History
Apr 21, 2017
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-1520?
CVE-2016-1520 is classified as a high severity vulnerability.
2
How do I fix CVE-2016-1520?
To fix CVE-2016-1520, update the Grandstream Wave app to version 1.0.1.27 or later.
3
What does CVE-2016-1520 affect?
CVE-2016-1520 affects the Grandstream Wave app version 1.0.1.26 and earlier on Android.
4
What type of attack is possible with CVE-2016-1520?
CVE-2016-1520 allows man-in-the-middle attackers to execute arbitrary code.
5
Why is HTTPS important for apps like Grandstream Wave regarding CVE-2016-1520?
HTTPS is important as it encrypts communication, preventing man-in-the-middle attacks as seen in CVE-2016-1520.