What is CVE-2017-11130?

CVE-2017-11130 is a high-severity vulnerability in Stashcat Heinekingmedia, classified under Insufficient Verification of Data Authenticity. CVSS score: 8.1/10. Published 2017-08-01.

How severe is CVE-2017-11130?

High severity. CVSS v3 base score is 8.1 out of 10.

Vulnerability in Stashcat Heinekingmedia

CVE-2017-11130

An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. The product's protocol only tries to ensure confidentiality. In the whole protocol, no integrity or authenticity checks are done. Therefore man-in-the-middle attackers can conduct replay attacks.

EPSS: 0.004 (32.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Stashcat Heinekingmedia
N/a — versions n/a

Weakness classification (CWE)

CWE-345 — Insufficient Verification of Data Authenticity

References

cve@mitre.org (Mailing List, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2017-11130?: CVE-2017-11130 is a high-severity vulnerability in Stashcat Heinekingmedia, classified under Insufficient Verification of Data Authenticity. CVSS score: 8.1/10. Published 2017-08-01.
How severe is CVE-2017-11130?: High severity. CVSS v3 base score is 8.1 out of 10.