Vulnerability · Published Apr 22, 2022 · Assigned by lenovo
CVE-2021-3898
Medium 6.8
In plain English
A medium-severity improper certificate validation in Device Help Android App from Motorola. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 40% of all known vulnerabilities).
Severity (CVSS 3.1)6.8Medium
Exploit odds (30 days)0.5%top 60.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Versions of Motorola Ready For and Motorola Device Help Android applications prior to 2021-04-08 do not properly verify the server certificate which could lead to the communication channel being accessible by an attacker.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Motorola | Device Help Android App | various |
| Motorola | Ready For Android App | various |
Weakness: CWE-295 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
References
- https://support.lenovo.com/us/en/product_security/LEN-58311 x_refsource_MISC