Nutspace Nut_mobile
3 CVEs affecting Nutspace Nut_mobile. Latest disclosed: 2018-07-13. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-6548 | Critical | 9.8 | 2018-07-13 | The Zizai Tech Nut mobile app makes requests via HTTP instead of HTTPS. These requests contain the user's authenticated session token with the URL. An attacker… |
CVE-2016-6547 | High | 7.8 | 2018-07-13 | The Zizai Tech Nut mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file. |
CVE-2016-6549 | Medium | 4.3 | 2018-07-13 | The Zizai Tech Nut device allows unauthenticated Bluetooth pairing, which enables unauthenticated connected applications to write data to the device name attri… |