7.5
CVE-2017-2748
- EPSS 1.04%
- Veröffentlicht 27.03.2019 17:29:00
- Zuletzt bearbeitet 21.11.2024 03:24:06
- Quelle hp-security-alert@hp.com
- Teams Watchlist Login
- Unerledigt Login
A potential security vulnerability caused by the use of insecure (http) transactions during login has been identified with early versions of the Isaac Mizrahi Smartwatch mobile app. HP has no access to customer data as a result of this issue.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hp ≫ Isaac Mizrahi Smartwatch Version1.0.2.10 SwPlatformiphone_os
Hp ≫ Isaac Mizrahi Smartwatch Version1.0.201601214 SwPlatformandroid
Hp ≫ Isaac Mizrahi Smartwatch Version1.2.2.12 SwPlatformiphone_os
Hp ≫ Isaac Mizrahi Smartwatch Version1.2.2016040820 SwPlatformandroid
Hp ≫ Isaac Mizrahi Smartwatch Version1.3.7 SwPlatformiphone_os
Hp ≫ Isaac Mizrahi Smartwatch Version1.3.2016052319 SwPlatformandroid
Hp ≫ Isaac Mizrahi Smartwatch Version1.4.8 SwPlatformiphone_os
Hp ≫ Isaac Mizrahi Smartwatch Version1.4.2016072601 SwPlatformandroid
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.04% | 0.755 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|