medium4.3
CVE-2015-1595
The Siemens SPCanywhere application for Android and iOS does not use encryption during lookups of system ID to IP address mappings, which allows man-in-the-mid…
Impact
The Siemens SPCanywhere application for Android and iOS does not use encryption during lookups of system ID to IP address mappings, which allows man-in-the-middle attackers to discover alarm IP addresses and spoof servers by intercepting the client-server data stream.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Spcanywhere | through 1.4 through 1.4.1 |