A vulnerability classified as critical has been found in rvappstudios Best Phone Security 2.1. Affected is an unknown function of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues.
This vulnerability is traded as CVE-2014-5691. Access to the local network is required for this attack. There is no exploit available.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2014-5691 | rvappstudios Best Phone Security 2.1 X.509 Certificate cryptographic issues (VU#582497)
A vulnerability classified as critical has been found in rvappstudios Best Phone Security 2.1. Affected is an unknown function of the component X.509…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Compliance, SLA & Vendor Adherence
Advisory-Prüfung · Score-Einordnung · Fristen
Advisory Radar
Offizielles Hersteller-Update verfügbar
Hersteller-Sicherheitsmeldungen & Patch-Status
Handlungsempfehlung für Administratoren
Hersteller hat ein verifiziertes Patch-Release herausgegeben. Sofortiges Rollout auf Test- und Produktivsystemen empfohlen.
Referenzen aus der Primärquelle („Verifiziert" nur bei Hersteller-Domäne):
-
Web Referencewww.kb.cert.org
-
Web Referencewww.kb.cert.org
-
Google / Chrome Security Bulletin Verifiziertgoogle.com