NVD

Id
85119  
Name
CVE-2016-1518  
Description
The auto-provisioning mechanism in the Grandstream Wave app 1.0.1.26 and earlier for Android and Grandstream Video IP phones allows man-in-the-middle attackers to spoof provisioning data and consequently modify device functionality, obtain sensitive information from system logs, and have unspecified other impact by leveraging failure to use an HTTPS session for downloading configuration files from http://fm.grandstream.com/gs/.  
Reject
 
CVSS Version
 
CVSS Score
 
Severity
 
CVSS Base Score
 
CVSS Impact Subscore
 
CVSS Exploit Subscore
 
CVSS Vector
 
Pub Date
2017-04-27  
Published
2017-04-21  
Modified Date
2017-04-21  
Seq
2016-1518  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
414805 85119 CVE-2017-7206 97006  View
414806 85119 CVE-2017-7206 https://bugzilla.libav.org/show_bug.cgi?id=1002  View
414807 85119 CVE-2017-7206 97006  View
414808 85119 CVE-2017-7206 https://bugzilla.libav.org/show_bug.cgi?id=1002  View
414809 85119 CVE-2017-7206 97006  View
414810 85119 CVE-2017-7206 https://bugzilla.libav.org/show_bug.cgi?id=1002  View
417917 85119 CVE-2017-3455 http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html  View
417918 85119 CVE-2017-3455 97820  View
417919 85119 CVE-2017-3455 http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html  View
417920 85119 CVE-2017-3455 97820  View

Related JVN