CVE-2014-5716

CVE-2014-5716 describes a critical vulnerability in the GUNSHIP BATTLE : Helicopter 3D Android application (version 1.1.7). The app fails to properly validate X.509 certificates from SSL servers, making it susceptible to man-in-the-middle (MitM) attacks. An attacker could exploit this by presenting a crafted certificate, spoofing legitimate servers, and potentially intercepting sensitive user information. The vulnerability has a CVSS score of 5.4, indicating a medium severity. It requires adjacent network access (AV:A) and moderate attack complexity (AC:M), but no authentication (Au:N). The potential impact includes partial confidentiality, integrity, and availability compromise (C:P/I:P/A:P). There is no evidence of active exploitation, nor is there publicly available exploit code in Metasploit, Nuclei, or ExploitDB. The CVE has received minimal community discussion and media coverage, suggesting a low level of public awareness or concern.