CVE-2014-7449

CVE-2014-7449 describes a critical vulnerability in the My NGEMC Account Android application (version 1.153.0034) where it fails to properly validate X.509 certificates from SSL servers. This oversight allows man-in-the-middle attackers to spoof legitimate servers using crafted certificates, potentially leading to the interception of sensitive user information. With a CVSS score of 5.4, this vulnerability is rated as medium severity. The attack requires adjacent network access (AV:A) and moderate attack complexity (AC:M), but does not require authentication (Au:N). Successful exploitation could result in partial compromise of confidentiality, integrity, and availability (C:P/I:P/A:P). There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating a low level of public attention.