CVE-2017-11578

CVE-2017-11578 describes a vulnerability in the Blipcare Wi-Fi Blood Pressure Monitor firmware, where the device's web management interface uses unencrypted HTTP for Wi-Fi credential input. This allows an attacker on the same wireless network to intercept sensitive user Wi-Fi credentials via a Man-in-the-Middle (MITM) attack. With a CVSS score of 5.9 (Medium), the vulnerability has a high confidentiality impact, but requires high attack complexity and no user interaction. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.