critical9.1
CVE-2017-17945
The ASUS HiVivo aspplication before 5.6.27 for ASUS Watch has Missing SSL Certificate Validation.
Impact
The ASUS HiVivo aspplication before 5.6.27 for ASUS Watch has Missing SSL Certificate Validation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Asus | Hivivo | before 5.6.27 |
| Asus | Vivobaby | before 1.1.09 |
Weakness classification
References
- NVD record
- CVE.org record
- http://firstsight.me/2017/12/lack-of-binary-protection-at-asus-vivo-baby-and-hivivo-for-android-that-could-result-of-several-security-issues
- http://firstsight.me/2017/12/lack-of-binary-protection-at-asus-vivo-baby-and-hivivo-for-android-that-could-result-of-several-security-issues