Search

Find a vulnerability

Search criteria

    1 vulnerability by DFNDR

    CVE-2017-13108 (GCVE-0-2017-13108)

    Vulnerability from cvelistv5 – Published: 2018-08-15 22:00 – Updated: 2024-08-05 18:58
    VLAI
    Title
    DFNDR Security Antivirus, Anti-hacking & Cleaner, 5.0.9, 2017-11-01, Android application uses a hard-coded key for encryption
    Summary
    DFNDR Security Antivirus, Anti-hacking & Cleaner, 5.0.9, 2017-11-01, Android application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key.
    Severity
    No CVSS data available.
    CWE
    Assigner
    certcc CNA
    References
    URL Tags
    https://www.kb.cert.org/vuls/id/787952 third-party-advisoryx_refsource_CERT-VN
    Impacted products
    Date Public
    2018-08-14 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T18:58:12.621Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "VU#787952",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "https://www.kb.cert.org/vuls/id/787952"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "Android mobile"
          ],
          "product": "Security Antivirus, Anti-hacking \u0026 Cleaner",
          "vendor": "DFNDR",
          "versions": [
            {
              "status": "affected",
              "version": "5.0.9"
            }
          ]
        }
      ],
      "datePublic": "2018-08-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "DFNDR Security Antivirus, Anti-hacking \u0026 Cleaner, 5.0.9, 2017-11-01, Android application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-798",
              "description": "CWE-798",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-08-15T21:57:01.000Z",
        "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "shortName": "certcc"
      },
      "references": [
        {
          "name": "VU#787952",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "https://www.kb.cert.org/vuls/id/787952"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "DFNDR Security Antivirus, Anti-hacking \u0026 Cleaner, 5.0.9, 2017-11-01, Android application uses a hard-coded key for encryption",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cert@cert.org",
          "ID": "CVE-2017-13108",
          "STATE": "PUBLIC",
          "TITLE": "DFNDR Security Antivirus, Anti-hacking \u0026 Cleaner, 5.0.9, 2017-11-01, Android application uses a hard-coded key for encryption"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Security Antivirus, Anti-hacking \u0026 Cleaner",
                      "version": {
                        "version_data": [
                          {
                            "affected": "=",
                            "platform": "Android mobile",
                            "version_affected": "=",
                            "version_name": "5.0.9",
                            "version_value": "5.0.9"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "DFNDR"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "DFNDR Security Antivirus, Anti-hacking \u0026 Cleaner, 5.0.9, 2017-11-01, Android application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-798"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "VU#787952",
              "refsource": "CERT-VN",
              "url": "https://www.kb.cert.org/vuls/id/787952"
            }
          ]
        },
        "source": {
          "discovery": "UNKNOWN"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
    "assignerShortName": "certcc",
    "cveId": "CVE-2017-13108",
    "datePublished": "2018-08-15T22:00:00.000Z",
    "dateReserved": "2017-08-22T00:00:00.000Z",
    "dateUpdated": "2024-08-05T18:58:12.621Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}