TI-2018-14922 CVE-2018-20960 · GHSA-6g3v-2r46-2fvm
Nespresso Prodigio devices lack Bluetooth connection security.
Priority LOW 36
Nespresso Prodigio devices lack Bluetooth connection security.
No Nespresso vulnerabilities are listed in CISA KEV.
2 records
Nespresso Prodigio devices lack Bluetooth connection security.
The Nespresso (aka com.nespresso.activities) application 2.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information v…