CVE-2014-5645

CVE-2014-5645 describes a critical vulnerability in the CamScanner -Phone PDF Creator (com.intsig.camscanner) Android application version 3.4.0.20140624. The application fails to properly validate X.509 certificates from SSL servers, enabling man-in-the-middle (MITM) attackers to spoof legitimate servers using crafted certificates. This flaw could lead to the interception and compromise of sensitive user information. The vulnerability has a CVSS score of 5.4, indicating a medium severity. An attacker could exploit this by being on the same network segment as the victim (AV:A), requiring moderate attack complexity (AC:M) and no authentication (Au:N). Successful exploitation could result in partial confidentiality, integrity, and availability impacts (C:P/I:P/A:P). There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. The CVE has received minimal community discussion and media coverage, suggesting a low level of public awareness or interest.