CVE-2014-6774

CVE-2014-6774 describes a critical vulnerability in the USEK Android application (version 1.0.8) where it fails to properly validate X.509 certificates from SSL servers, making it susceptible to man-in-the-middle attacks. This allows an attacker to spoof legitimate servers, potentially leading to the interception and compromise of sensitive user information. The vulnerability has a CVSS score of 5.4, indicating a medium severity with an adjacent network attack vector, medium access complexity, and potential for partial compromise of confidentiality, integrity, and availability. While no active exploitation, public exploit code, or significant community discussion has been observed, the flaw remains a security risk for users of the affected application.