NQ Mobile Contacts Backup & Restore 1.1 for Android
Approved changes feed: RSS · Atom
cpe:2.3:a:nq:contacts_backup_\&_restore:1.1:*:*:*:*:android:*:*
part: a version: 1.1 update: *
| Vendor | Nq (a9c2860d-dd3b-5749-99d7-4d2c7f7a80a0) |
|---|---|
| Product | Contacts Backup & Restore (2fc68594-dfbd-5aba-bd32-59224ce35ba8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | android |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-15999 |
vulnerable | 2026-06-08 05:08:59.851478 |
Details available
In the "NQ Contacts Backup & Restore" application 1.1 for Android, no HTTPS is used for transmitting login and synced user data. When logging in, the username is transmitted in cleartext along with an SHA-1 hash of the password. The attacker can either crack this hash or use it for further attacks where only the hash value is required.
Published: 2017-10-29T17:00:00.000Z
Updated: 2024-09-16T18:43:44.967Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15998 |
vulnerable | 2026-06-08 05:08:59.851183 |
Details available
In the "NQ Contacts Backup & Restore" application 1.1 for Android, DES encryption with a static key is used to secure transmitted contact data. This makes it easier for remote attackers to obtain cleartext information by sniffing the network.
Published: 2017-10-29T17:00:00.000Z
Updated: 2024-09-17T03:23:23.731Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15997 |
vulnerable | 2026-06-08 05:08:59.850785 |
Details available
In the "NQ Contacts Backup & Restore" application 1.1 for Android, RC4 encryption is used to secure the user password locally stored in shared preferences. Because there is a static RC4 key, an attacker can gain access to user credentials more easily by leveraging access to the preferences XML file.
Published: 2017-10-29T17:00:00.000Z
Updated: 2024-09-17T00:51:39.239Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.