Vulnerabilities

TI-2023-17392 CVE-2023-34761 · GHSA-668g-fp7v-3973

An unauthenticated attacker within BLE proximity can remotely connect to a 7-Eleven LED…

MEDIUM 62

An unauthenticated attacker within BLE proximity can remotely connect to a 7-Eleven LED Message Cup, Hello Cup 1.3.1 for Android, and bypass the application's client-side chat censor filter.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00496 Published 2023-06-28 No fix listed CWE-306

TI-2014-04833 CVE-2014-5883 · GHSA-2gm6-qg2v-w98r

The 7-ELEVEN (aka ecowork.seven) application 2.08.000 for Android does not verify X.509…

LOW 24

The 7-ELEVEN (aka ecowork.seven) application 2.08.000 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a craf…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00271 Published 2014-09-12 No fix listed CWE-310

Vulnerabilities

Filters

An unauthenticated attacker within BLE proximity can remotely connect to a 7-Eleven LED…

The 7-ELEVEN (aka ecowork.seven) application 2.08.000 for Android does not verify X.509…