CVE-2023-33757

5.9 mediumEPSS 0.3%

Medium (5.9) in splicecom. EPSS 0.3% chance of exploitation in the next 30 days.

A lack of SSL certificate validation in Splicecom iPCS (iOS App) v1.3.4, iPCS2 (iOS App) v2.8 and before, and iPCS (Android App) v1.8.5 and before allows attackers to eavesdrop on communications via a man-in-the-middle attack.

Severity

CVSS 3.1

5.9 medium

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 21% of CVEs (scores of 2026-10-31)
CWE: CWE-295
Published: 2024-01-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

splicecom:ipcs
splicecom:ipcs2

References

https://github.com/twignet/splicecom
https://github.com/twignet/splicecom

Check your stack JSON