Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Grandstream Wave app 1.0.1.26 and earlier for Android does not use HTTPS when retrieving update information, which might allow man-in-the-middle attackers to execute arbitrary code via a crafted application.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Grandstream Wave app for Android 安全漏洞
Vulnerability Description
Grandstream Wave app for Android是美国潮流网络（Grandstream）公司的一套免费的用于Android系统的网络电话应用程序。该应用程序支持多账户、多线路同时使用等。 基于Android平台的Grandstream Wave 1.0.1.26之前的版本中存在安全漏洞，该漏洞源于程序在检索更新信息时，没有使用HTTPS。攻击者可借助特制的应用程序利用该漏洞实施中间人攻击，执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A