Login Request a demo
WA
Product
Wave
by Grandstream · last CVE Apr 21, 2017
3
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 2Medium 1Low 0
Severity
All severities3Critical0High2Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Wave to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-1518
8.1
2%
Apr 21
The auto-provisioning mechanism in the Grandstream Wave app 1.0.1.26 and earlier for Android and Grandstream Video IP phones allows man-in-the-middle attackers to spoof…
Affected: through 1.0.1.26
CVE-2016-1520
7.8
2%
Apr 21
The Grandstream Wave app 1.0.1.26 and earlier for Android does not use HTTPS when retrieving update information, which might allow man-in-the-middle attackers to execute arbitrary…
Affected: through 1.0.1.26
CVE-2016-1519
5.9
1%
Apr 21
The com.softphone.common package in the Grandstream Wave app 1.0.1.26 and earlier for Android does not properly validate SSL certificates, which allows man-in-the-middle attackers…
Affected: through 1.0.1.26
Showing 3