CVE-2016-5648 | BDVDB-2026-86244 Detail

Description#

Acer Portal app before 3.9.4.2000 for Android does not properly validate SSL certificates, which allows remote attackers to perform a Man-in-the-middle attack via a crafted SSL certificate.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/archive/1/538851/100/0/threaded
http://seclists.org/fulldisclosure/2016/Jul/17
http://packetstormsecurity.com/files/137775/Acer-Portal-Android-Application-3.9.3.2006-Man-In-The-Middle.html
https://www.kb.cert.org/vuls/id/690343

Exploit#

No public exploit known

History#

Version 12017-06-08Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.