Nt Oneapp
Monthly
Man-in-the-middle interception and modification of NT OneAPP client-server communications is possible because the application fails to validate both the server certificate and hostname. Network-adjacent, unauthenticated attackers who already hold a position on the traffic path - such as a rogue Wi-Fi access point or compromised LAN segment - can present an arbitrary certificate and read or alter sessions. No public exploit was identified at time of analysis, and exploitation is bounded by the requirement to intercept live traffic; the independent assessment rates this as adjacent-network, high-complexity, with high confidentiality and integrity impact.
Hard-coded cryptographic key in the NT OneAPP login flow enables remote attackers to decrypt captured authentication requests and recover plaintext user credentials and device information. The issue affects NT OneAPP from NewType Infortech (CPE version wildcard, so all versions unless the vendor states otherwise); exploitation requires the attacker to first obtain encrypted login traffic, which is why the independent assessment rates attack complexity high despite the unauthenticated network vector. No public exploit was identified at time of analysis, and no CISA KEV entry is associated with this CVE.
NT OneAPP stores account usernames and passwords in cleartext within Android backup data, so an attacker with local device access can extract credentials after initiating an ADB backup and obtaining the user's on-device confirmation. The issue is tracked as CWE-312 and rated 6.7 under CVSS 4.0, but the chain requires local access, reachable ADB/USB debugging, and explicit user approval, keeping real-world risk low to moderate. No public exploit was identified at time of analysis.
Authentication bypass in NT OneAPP allows an attacker with local access to a logged-in device to circumvent the App PIN lock via a crafted Deep Link and reach protected app resources. The flaw requires the victim to already have an active authenticated session protected only by the PIN, so it defeats the at-rest PIN barrier rather than full account authentication and is not remotely exploitable. There is no public exploit identified at time of analysis and no CISA KEV entry in the provided data; the independent assessment classifies the issue as moderate risk rather than high priority.
Credential disclosure in NewType Infortech's NT OneAPP mobile application allows remote attackers to obtain a logged-in user's NUP Portal passcode by luring them through an HTTP Basic Authentication challenge raised from unvalidated content loaded in the app's WebView. Successful exploitation requires the victim to already be authenticated and to actively respond to the spoofed challenge, and the vendor describes additional undocumented preconditions, so the flaw is conditional and not reliably reproducible across deployments; no public exploit code or confirmed in-the-wild activity is associated with it at time of analysis. Rated medium severity (CVSS 4.0 base 5.9; independently assessed CVSS 3.1 5.8 with high attack complexity and required user interaction).
Man-in-the-middle interception and modification of NT OneAPP client-server communications is possible because the application fails to validate both the server certificate and hostname. Network-adjacent, unauthenticated attackers who already hold a position on the traffic path - such as a rogue Wi-Fi access point or compromised LAN segment - can present an arbitrary certificate and read or alter sessions. No public exploit was identified at time of analysis, and exploitation is bounded by the requirement to intercept live traffic; the independent assessment rates this as adjacent-network, high-complexity, with high confidentiality and integrity impact.
Hard-coded cryptographic key in the NT OneAPP login flow enables remote attackers to decrypt captured authentication requests and recover plaintext user credentials and device information. The issue affects NT OneAPP from NewType Infortech (CPE version wildcard, so all versions unless the vendor states otherwise); exploitation requires the attacker to first obtain encrypted login traffic, which is why the independent assessment rates attack complexity high despite the unauthenticated network vector. No public exploit was identified at time of analysis, and no CISA KEV entry is associated with this CVE.
NT OneAPP stores account usernames and passwords in cleartext within Android backup data, so an attacker with local device access can extract credentials after initiating an ADB backup and obtaining the user's on-device confirmation. The issue is tracked as CWE-312 and rated 6.7 under CVSS 4.0, but the chain requires local access, reachable ADB/USB debugging, and explicit user approval, keeping real-world risk low to moderate. No public exploit was identified at time of analysis.
Authentication bypass in NT OneAPP allows an attacker with local access to a logged-in device to circumvent the App PIN lock via a crafted Deep Link and reach protected app resources. The flaw requires the victim to already have an active authenticated session protected only by the PIN, so it defeats the at-rest PIN barrier rather than full account authentication and is not remotely exploitable. There is no public exploit identified at time of analysis and no CISA KEV entry in the provided data; the independent assessment classifies the issue as moderate risk rather than high priority.
Credential disclosure in NewType Infortech's NT OneAPP mobile application allows remote attackers to obtain a logged-in user's NUP Portal passcode by luring them through an HTTP Basic Authentication challenge raised from unvalidated content loaded in the app's WebView. Successful exploitation requires the victim to already be authenticated and to actively respond to the spoofed challenge, and the vendor describes additional undocumented preconditions, so the flaw is conditional and not reliably reproducible across deployments; no public exploit code or confirmed in-the-wild activity is associated with it at time of analysis. Rated medium severity (CVSS 4.0 base 5.9; independently assessed CVSS 3.1 5.8 with high attack complexity and required user interaction).