Description
The LaserGest mobile application disables TLS certificate and hostname verification via setServerTrustMode("nocheck"), allowing a man-in-the-middle attacker to intercept or modify network traffic, including credentials and API communications.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| laservideo | lasergest | 1.0.18 | — |