CVE-2017-2103

5.9 mediumEPSS 0.7%

Medium (5.9) in k-opticom corporation lala call. EPSS 0.7% chance of exploitation in the next 30 days.

The LaLa Call App for Android 2.4.7 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Severity

CVSS 3.0

5.9 medium

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2017-04-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

k-opticom_corporation:lala_call

References

http://jvn.jp/en/jp/JVN01014759/index.html
http://www.securityfocus.com/bid/96004
http://jvn.jp/en/jp/JVN01014759/index.html
http://www.securityfocus.com/bid/96004

Check your stack JSON