Approved changes feed: RSS · Atom
cpe:2.3:a:grandstream:wave:*:*:*:*:*:android:*:*
part: a version: * update: *
| Vendor | Grandstream (fb3509d2-60fb-591c-98b3-ccf7c0d07861) |
|---|---|
| Product | Wave (d56ccb91-3e21-5594-8ffc-e11645f92674) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | android |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-1520 |
vulnerable | 2026-06-08 05:07:31.657169 |
Details available
The Grandstream Wave app 1.0.1.26 and earlier for Android does not use HTTPS when retrieving update information, which might allow man-in-the-middle attackers to execute arbitrary code via a crafted application.
Published: 2017-04-21T20:00:00.000Z
Updated: 2024-08-05T23:02:11.564Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1519 |
vulnerable | 2026-06-08 05:07:31.656834 |
Details available
The com.softphone.common package in the Grandstream Wave app 1.0.1.26 and earlier for Android does not properly validate SSL certificates, which allows man-in-the-middle attackers to spoof the Grandstream provisioning server via a crafted certificate.
Published: 2017-04-21T20:00:00.000Z
Updated: 2024-08-05T23:02:11.544Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1518 |
vulnerable | 2026-06-08 05:07:31.656409 |
Details available
The auto-provisioning mechanism in the Grandstream Wave app 1.0.1.26 and earlier for Android and Grandstream Video IP phones allows man-in-the-middle attackers to spoof provisioning data and consequently modify device functionality, obtain sensitive information from system logs, and have unspecified other impact by leveraging failure to use an HTTPS session for downloading configuration files from http://fm.grandstream.com/gs/.
Published: 2017-04-21T20:00:00.000Z
Updated: 2024-08-05T23:02:11.538Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.