CVE-2017-2278

Name of the Vulnerable Software and Affected Versions RBB SPEED TEST App for Android versions 2.0.3 and earlier RBB SPEED TEST App for iOS versions 2.1.0 and earlier

Description The issue concerns the failure to verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Recommendations For RBB SPEED TEST App for Android versions 2.0.3 and earlier, update to a version that properly verifies X.509 certificates. For RBB SPEED TEST App for iOS versions 2.1.0 and earlier, update to a version that properly verifies X.509 certificates. As a temporary workaround, consider disabling the use of SSL connections in the app until a patch is available.