K-Opticom Corporation

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

K-Opticom Corporation records in CISA KEV

No K-Opticom Corporation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Business Lala Call 1 record LOW Lala Call 1 record LOW

Records

1 record in Lala Call · all components

TI-2017-01408 CVE-2017-2103 · GHSA-g9vr-ff5r-436g

Information disclosure in K-Opticom Corporation LaLa Call App for Android

LOW 28

The LaLa Call App for Android 2.4.7 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.00667 Published 2017-04-28 No fix listed CWE-200

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0