Skip to content
OpenAdvisories
Unscored CVE-2021-20732 EUVD-2021-8146GHSA-9jc3-jwwp-h9mw

The ATOM (ATOM - Smart life App for Android versions prior to 1.8.1 and ATOM - Smart life App for iOS versions prior to 1.8.2) does not ver…

Published Jun 9, 2021 · Updated Aug 3, 2024 · Assigned by jpcert

Description

The ATOM (ATOM - Smart life App for Android versions prior to 1.8.1 and ATOM - Smart life App for iOS versions prior to 1.8.2) does not verify server certificate properly, which allows man-in-the-middle attackers to eavesdrop on encrypted communication via a crafted certificate.

Affected products

VendorProductAffectedFixed
ATOM tech ATOM ATOM - Smart life App for Android versions prior to 1.8.1 and ATOM - Smart life App for iOS versions prior to 1.8.2 —

References