Windows Phone 7 Firmware

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2012-2993 MEDIUM This Month

Microsoft Windows Phone 7 does not verify the domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL server for the (1). Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. Epss exploitation probability 14.7% and no vendor patch available.

Information Disclosure Microsoft Windows Phone 7 Firmware

NVD

CVSS 3.1

5.9

EPSS

14.7%

CVE-2012-2993

EPSS 15% CVSS 5.9

MEDIUM This Month

Microsoft Windows Phone 7 does not verify the domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL server for the (1). Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. Epss exploitation probability 14.7% and no vendor patch available.

Information Disclosure Microsoft Windows Phone 7 Firmware

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy