CVE-2015-1597

Currently unrated

Key Information:

Vendor
Siemens
Status
Spcanywhere
Vendor
CVE Published:
7 March 2015

Summary

The Siemens SPCanywhere application for Android does not use encryption during the loading of code, which allows man-in-the-middle attackers to execute arbitrary code by modifying the client-server data stream.

References

http://www.siemens.com/innovation/pool/de/forschungsfelde...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.