漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Softish C6 Ear Camera and EarVision Android Application Cleartext transmission of sensitive information
Vulnerability Description
The C6 ear camera transmits live video to the EarVision Android application over unencrypted UDP streams. The application manifest permits cleartext traffic, and captured network traffic contains reconstructable JPEG or WEBP video frames transmitted over UDP. An attacker within local wireless range may capture and reconstruct the live video stream without transport encryption.
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
敏感数据的明文传输
Vulnerability Title
Softish EarVision Android application 加密问题漏洞
Vulnerability Description
Softish EarVision Android application是Softish公司的一款提供网络安全威胁情报采集与分析的Android应用。 Softish EarVision Android application 1.3.1版本和C6 Ear Camera 1.3.1_Code 132版本存在加密问题漏洞,该漏洞源于使用未加密的UDP流传输实时视频且应用程序清单允许明文流量,可能导致本地无线范围内的攻击者捕获并重建视频流。
CVSS Information
N/A
Vulnerability Type
N/A