CVE-2014-7686

CVE-2014-7686 describes a critical vulnerability in version 3.2 of the So. Co. Business Partnership (com.ChamberMe.SCBPSOUTHERNCO) Android application. This flaw stems from the application's failure to properly validate X.509 certificates from SSL servers, making it susceptible to man-in-the-middle (MitM) attacks. An attacker could exploit this by presenting a crafted certificate, thereby spoofing legitimate servers and potentially intercepting sensitive user information. The vulnerability carries a CVSS score of 5.4, indicating a medium severity. Its attack vector is adjacent network (AV:A), meaning an attacker needs to be on the same local network as the victim. The attack complexity is medium (AC:M), and it could lead to partial compromise of confidentiality, integrity, and availability (C:P/I:P/A:P). Despite its potential impact, there is no evidence of active exploitation for CVE-2014-7686, and it is not listed in the CISA KEV catalog. There are no known public exploit codes (Metasploit, Nuclei, ExploitDB), and it has received no community discussion or media coverage, suggesting a low level of public awareness or exploitation.