Grandstream Wave
3 CVEs affecting Grandstream Wave. Latest disclosed: 2017-04-21. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-1518 | High | 8.1 | 2017-04-21 | The auto-provisioning mechanism in the Grandstream Wave app 1.0.1.26 and earlier for Android and Grandstream Video IP phones allows man-in-the-middle attackers… |
CVE-2016-1520 | High | 7.8 | 2017-04-21 | The Grandstream Wave app 1.0.1.26 and earlier for Android does not use HTTPS when retrieving update information, which might allow man-in-the-middle attackers… |
CVE-2016-1519 | Medium | 5.9 | 2017-04-21 | The com.softphone.common package in the Grandstream Wave app 1.0.1.26 and earlier for Android does not properly validate SSL certificates, which allows man-in-… |