Read the docs

Juiker

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Juiker records in CISA KEV

No Juiker vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

3 records in Juiker · all components

TI-2022-17824 CVE-2022-38117 · GHSA-2wjq-7fcc-4p8f

Juiker app - Hard-coded Credentials

Priority LOW 27

Juiker app hard-coded its AES key in the source code.

CVSS 3.1MEDIUM 6.1 Physical No auth No interaction EPSS 0.00296 Published 2022-10-24 No fix listed CWE-798
Priority LOW 24

The Juiker (aka org.itri) application 3.2.0829.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted c…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00297 Published 2014-09-24 No fix listed CWE-310
TI-2022-18435 CVE-2022-39043 · GHSA-whvh-7626-25qp

Juiker app - Information Leakage

Priority LOW 12

Juiker app stores debug logs which contains sensitive information to mobile external storage.

CVSS 3.1LOW 2.4 Physical No auth No interaction EPSS 0.00256 Published 2023-03-27 No fix listed CWE-200
Open these records in search →