CVE-2017-9663 | BDVDB-2026-94928 Detail

General Motors and Shanghai OnStar (SOS) iOS Client

Description#

An Cleartext Storage of Sensitive Information issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1. Successful exploitation of this vulnerability may allow a remote attacker to access an encryption key that is stored in cleartext in memory.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-312

References#

https://ics-cert.us-cert.gov/advisories/ICSA-17-234-04
http://www.securityfocus.com/bid/102481

Exploit#

No public exploit known

History#

Version 12018-01-09Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.