Description
The Grandstream Wave app 1.0.1.26 and earlier for Android does not use HTTPS when retrieving update information, which might allow man-in-the-middle attackers to execute arbitrary code via a crafted application.
Unscored
CVE-2016-1520
EUVD-2016-2615GHSA-fqfw-xqpm-2238
The Grandstream Wave app 1.0.1.26 and earlier for Android does not use HTTPS when retrieving update information, which might allow man-in-t…
Published Apr 21, 2017 · Updated Aug 5, 2024 · Assigned by certcc