Xiaomi Pre-Installed Security App Vulnerable to MiTM Attacks

guest · Apr 4, 2019

Xiaomi Pre-Installed Security App Vulnerable to MiTM Attacks
April 4, 2019
https://www.bleepingcomputer.com/ne...lled-security-app-vulnerable-to-mitm-attacks/

A vulnerability exposing users to Man-in-the-Middle (MiTM) attacks was patched by Xiaomi in the pre-installed security app Guard Provider following a disclosure report from Check Point Research.

Ironically, as discovered by Check Point's researchers, the Guard Provider app which should protect Xiaomi users from malware would instead allow malicious actors to carry out MiTM attacks because of "the unsecured nature of the network traffic to and from Guard Provider and the use of multiple SDKs within the same app" after connecting to the wireless network used by the vulnerable devices.

Check Point concludes by saying that using too many SDKs when developing an app comes with the risk of leaving "organizations and users exposed to potential pitfalls that can be exploited by threat actors to interfere with the regular operation of the device."
Click to expand...

Log in or Sign up

Xiaomi Pre-Installed Security App Vulnerable to MiTM Attacks

guest Guest

Log in or Sign up

Xiaomi Pre-Installed Security App Vulnerable to MiTM Attacks

guest Guest

Useful Searches