Gm

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Gm records in CISA KEV

No Gm vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Shanghai Onstar · all components

TI-2017-09404 CVE-2017-12695 · GHSA-c8qr-wqjf-46xv

MEDIUM 42

An Improper Authentication issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01852 Published 2018-01-09 No fix listed CWE-287

TI-2017-07060 CVE-2017-9663 · GHSA-6fpg-44rr-wcfj

LOW 35

An Cleartext Storage of Sensitive Information issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01072 Published 2018-01-09 No fix listed CWE-312

TI-2017-09405 CVE-2017-12697 · GHSA-wrhq-39rj-gcxf

LOW 29

A Man-in-the-Middle issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.01435 Published 2018-01-09 No fix listed CWE-300