5.9

CVE-2013-10001

A vulnerability was found in HTC One/Sense 4.x. It has been rated as problematic. Affected by this issue is the certification validation of the mail client. An exploit has been disclosed to the public and may be used.

Data is provided by the National Vulnerability Database (NVD)
Htc ≫ Mail Version5.2.2222282614.528614.528614
   Htc ≫ Sdk Api Version4.25
   Htc ≫ One Sv Version4.0.4 SwPlatformandroid
   Htc ≫ Sense Version4.1
Htc ≫ Mail Version5.5.550363
   Htc ≫ Sdk Api Version4.63
   Htc ≫ One X Version4.1.1 SwPlatformandroid
   Htc ≫ Sense Version4+
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.25% 0.484
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
cna@vuldb.com 4.8 2.2 2.5
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
CWE-295 Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

https://vuldb.com/?id.8900
Third Party Advisory
Permissions Required