CVE-2016-5648

MEDIUM

Acer Portal <3.9.4.2000 - Info Disclosure

Title source: llm

Description

Acer Portal app before 3.9.4.2000 for Android does not properly validate SSL certificates, which allows remote attackers to perform a Man-in-the-middle attack via a crafted SSL certificate.

References (4)

[Exploit, Third Party Advisory, VDB Entry] http://packetstormsecurity.com/files/137775/Acer-Portal-Android-Application-3.9.3.2006-Man-In-The-Middle.html

[Mailing List, Third Party Advisory] http://seclists.org/fulldisclosure/2016/Jul/17

[Third Party Advisory, US Government Resource] https://www.kb.cert.org/vuls/id/690343

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/538851/100/0/threaded

Scores

CVSS v3 5.3

EPSS 0.0134

EPSS Percentile 79.8%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Details

CWE

CWE-295

Status published

Products (2)

acer/acer_portal < 3.9.3.2006

n/a/n/a

Published Jun 08, 2017

Tracked Since Feb 18, 2026