Vulnerabilities

TI-2017-09405 CVE-2017-12697 · GHSA-wrhq-39rj-gcxf

Information disclosure in General Motors and Shanghai OnStar iOS Client

LOW 29

A Man-in-the-Middle issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.01435 Published 2018-01-09 No fix listed CWE-300

TI-2017-09404 CVE-2017-12695 · GHSA-c8qr-wqjf-46xv

MEDIUM 42

An Improper Authentication issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01852 Published 2018-01-09 No fix listed CWE-287

TI-2017-07060 CVE-2017-9663 · GHSA-6fpg-44rr-wcfj

LOW 35

An Cleartext Storage of Sensitive Information issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01072 Published 2018-01-09 No fix listed CWE-312