CVE-2019-17356

CVE-2019-17356 describes a critical vulnerability in the Infinite Design application 3.4.12 for Android, where user credentials (username and password) are transmitted unencrypted over TCP during the login process. This allows an attacker on the same local network to easily intercept sensitive authentication data, leading to a high impact on confidentiality. While the CVSS score is 6.5 (Medium), indicating a relatively low attack complexity and no user interaction required, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this vulnerability.