Information disclosure in Siemens Spcanywhere

CVE-2015-1598

The Siemens SPCanywhere application for Android does not properly store application passwords, which allows physically proximate attackers to obtain sensitive information by examining the device filesystem.

Vulnerability class: Information Disclosure

EPSS: 0.004 (31.2th percentile) — read the EPSS interpretation.

Affected products

Siemens Spcanywhere
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)