Skip to content
OpenAdvisories
Critical ICSA-17-234-04 3 CVEs

General Motors and Shanghai OnStar (SOS) iOS Client

Published Aug 22, 2017 · Updated Jan 9, 2018 · Revision 2

Vendor: General Motors (GM), Shanghai OnStar (SOS) Product: Shanghai OnStar iOS Client

Summary

ATTENTION: Remotely exploitable/low skill level to exploit.

Vulnerabilities 3

  • Unscored —
    CVE-2017-12695

    An Improper Authentication issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1. Su…

    iOS
  • Unscored —
    CVE-2017-12697

    A Man-in-the-Middle issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1. Successfu…

    iOS
  • Unscored —
    CVE-2017-9663

    An Cleartext Storage of Sensitive Information issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS…

    iOS

Revision history

  1. #2

    ICSA-17-234-04 General Motors and Shanghai OnStar (SOS) iOS Client (Update A)

  2. #1

    ICSA-17-234-04P General Motors, Shanghai OnStar, SOS iOS Client

References