CVE-2017-12695

8.8 highEPSS 1.9%

High (8.8) in gm shanghai onstar. EPSS 1.9% chance of exploitation in the next 30 days.

An Improper Authentication issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1. Successful exploitation of this vulnerability may allow an attacker to subvert security mechanisms and reset a user account password.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2018-01-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

gm:shanghai_onstar

References

http://www.securityfocus.com/bid/102481
https://ics-cert.us-cert.gov/advisories/ICSA-17-234-04
http://www.securityfocus.com/bid/102481
https://ics-cert.us-cert.gov/advisories/ICSA-17-234-04

Check your stack JSON