CVE-2017-13105

CVE-2017-13105 describes a critical vulnerability in Hi Security Virus Cleaner - Antivirus, Booster version 3.7.1.1329 for Android, where the application fails to properly validate SSL certificates during encrypted communication. This flaw allows for a man-in-the-middle attack, enabling an attacker to intercept and read all sensitive data transmitted by the application. The vulnerability is rated Medium severity (CVSS 5.9) due to its high impact on confidentiality, but requires high attack complexity as it relies on an attacker being able to perform a man-in-the-middle attack. While the attack vector is network-based, user interaction is not required for exploitation. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or Nuclei. The vulnerability has received minimal community discussion and media coverage, suggesting low awareness and a lack of widespread attention.