Trusted Design

Space Coast Credit Union SCCU Mobile for Android and iPhone fails to properly validate SSL certificates

概要

Overview Space Coast Credit Union SCCU Mobile for Android, version 2.1.0.1104 and earlier, and for iOS, version 2.2 and earlier, fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle (MITM) attacks. Description CWE-295: Improper Certificate Validation - CVE-2017-3212 SCCU Mobile is a banking application. On both Android and iOS devices, the app fails to properly validate SSL certificates provided by HTTPS connections, which means that an attacker in the position to perform MITM attacks may be able to obtain sensitive account information such as login credentials.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• Acer Portal app for Android does not properly validate SSL certificates (score: 0.65)
• Android banking malware masquerades as Flash Player (score: 0.53)
• Banking Trojan infected dozens of Android apps worldwide (score: 0.50)
• Android banking trojan as Flash Player and bypasses 2FA (score: 0.50)
• Android Trojan GM Bot is evolving and targeting more than 50 banks worldwide (score: 0.49)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る