Man-in-the-Middle Vulnerability in kantan netprint App for iOS
CVE-2020-5521

7.4HIGH

Key Information:

Vendor

Fuji Xerox Co.,ltd.

Status
Kantan Netprint App For iOS
Vendor
CVE Published:
27 January 2020

What is CVE-2020-5521?

The kantan netprint application for iOS, specifically versions up to 2.0.2, is susceptible to exploitation due to a lack of X.509 certificate verification. This vulnerability enables potential attackers to perform man-in-the-middle attacks, allowing them to impersonate servers and intercept sensitive information by utilizing a maliciously crafted certificate. Users of the app should be aware of this security weakness and consider updating to versions that address this critical flaw.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

kantan netprint App for iOS 2.0.2 and earlier

References

https://www.printing.ne.jp/support/information/AppVulnera...
x_refsource_MISC
http://jvn.jp/en/jp/JVN66435380/index.html
x_refsource_MISC

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.