CVE-2014-5552

CVE-2014-5552 describes a critical vulnerability in the Numbers & Addition! Math games Android application (version 1.4.3). The application fails to properly validate X.509 certificates from SSL servers, making it susceptible to man-in-the-middle attacks. An attacker could exploit this to spoof legitimate servers, intercepting and potentially compromising sensitive user information. The vulnerability carries a CVSS score of 5.4, indicating a medium severity. Exploitation requires network access (AV:A) and moderate attack complexity (AC:M), with potential impacts on confidentiality, integrity, and availability (C:P/I:P/A:P). Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules like Metasploit or Nuclei. The CVE has received minimal community discussion and media coverage, suggesting a low level of public awareness or concern.