CVE-2014-5626

CVE-2014-5626 describes a critical vulnerability in the Brothers In Arms 2 Free+ Android application (version 1.2.0b). The application fails to properly validate X.509 certificates from SSL servers, making it susceptible to man-in-the-middle (MitM) attacks. An attacker could exploit this flaw to spoof legitimate servers, intercept sensitive user information, and potentially compromise data integrity. This vulnerability has a CVSS score of 5.4, indicating a medium severity. Exploitation requires network access (AV:A) and moderate attack complexity (AC:M), but does not require authentication (Au:N). Successful exploitation could lead to partial confidentiality, integrity, and availability impacts (C:P/I:P/A:P). There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. The vulnerability has received minimal community discussion and media coverage, suggesting a low level of public awareness or interest.