Read the docs

Runtastic

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Runtastic records in CISA KEV

No Runtastic vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Runtastic Heart Rate 1 record LOW Runtastic Me 1 record LOW Runtastic Mountain Bike 1 record LOW Runtastic Pedometer 1 record LOW Runtastic Road Bike 1 record LOW Runtastic Running & Fitness 1 record LOW Runtastic Timer 1 record LOW

Records

7 records

TI-2014-04644 CVE-2014-5690 · GHSA-f95j-2rrq-x7w3

The Runtastic Timer (aka com.runtastic.android.timer) application 1.0.1 for Android does…

Priority LOW 24

The Runtastic Timer (aka com.runtastic.android.timer) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive info…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00297 Published 2014-09-09 No fix listed CWE-310
TI-2014-04643 CVE-2014-5689 · GHSA-5m6g-j9qj-3jwh

The Runtastic Road Bike (aka com.runtastic.android.roadbike.lite) application 2.0.1 for…

Priority LOW 24

The Runtastic Road Bike (aka com.runtastic.android.roadbike.lite) application 2.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain se…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00297 Published 2014-09-09 No fix listed CWE-310
TI-2014-04642 CVE-2014-5688 · GHSA-rm5w-wr4w-8836

The Runtastic Pedometer (aka com.runtastic.android.pedometer.lite) application 1.5 for…

Priority LOW 24

The Runtastic Pedometer (aka com.runtastic.android.pedometer.lite) application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sen…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00297 Published 2014-09-09 No fix listed CWE-310
TI-2014-04641 CVE-2014-5687 · GHSA-g837-68p6-22xj

The Runtastic Mountain Bike (aka com.runtastic.android.mountainbike.lite) application…

Priority LOW 24

The Runtastic Mountain Bike (aka com.runtastic.android.mountainbike.lite) application 2.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and o…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00297 Published 2014-09-09 No fix listed CWE-310
TI-2014-04640 CVE-2014-5686 · GHSA-r567-5f9x-m6vw

The Runtastic Me (aka com.runtastic.android.me.lite) application 1.0.2 for Android does…

Priority LOW 24

The Runtastic Me (aka com.runtastic.android.me.lite) application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive infor…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00297 Published 2014-09-09 No fix listed CWE-310
TI-2014-04639 CVE-2014-5685 · GHSA-63gp-9mjg-f4mp

The Runtastic Heart Rate (aka com.runtastic.android.heartrate.lite) application 1.3 for…

Priority LOW 24

The Runtastic Heart Rate (aka com.runtastic.android.heartrate.lite) application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain se…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00271 Published 2014-09-09 No fix listed CWE-310
TI-2014-04638 CVE-2014-5684 · GHSA-crg3-pgxq-g5cv

The Runtastic Running & Fitness (aka com.runtastic.android) application 5.1.2 for Android…

Priority LOW 24

The Runtastic Running & Fitness (aka com.runtastic.android) application 5.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitiv…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00297 Published 2014-09-09 No fix listed CWE-310
Open these records in search →