CVE-2013-3641

CVE-2013-3641 describes a critical vulnerability in the Pizza Hut Japan Official Order application for Android, versions prior to 1.1.1.a. The application fails to properly validate X.509 certificates from SSL servers, making it susceptible to man-in-the-middle (MitM) attacks. An attacker could exploit this weakness to spoof legitimate servers and intercept sensitive user information through a crafted certificate. This vulnerability carries a CVSS score of 5.8, indicating a medium severity. Exploitation requires medium attack complexity (AC:M) and can be carried out remotely (AV:N) without authentication (Au:N), potentially leading to partial compromise of confidentiality (C:P) and integrity (I:P). While the FAUCET Risk Score is 28/100, the EPSS score is very low, suggesting a minimal probability of exploitation in the wild. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. The CVE is not listed in CISA's KEV catalog, and there is negligible community discussion or media coverage surrounding this vulnerability, indicating a low level of public attention.