CVE-2014-7047

CVE-2014-7047 describes a critical vulnerability in the Ocean Avenue Mobile Pro application (version 2.0) for Android, where the application fails to properly validate X.509 certificates from SSL servers. This oversight allows man-in-the-middle (MitM) attackers to spoof legitimate servers using crafted certificates, potentially intercepting and obtaining sensitive user information. The vulnerability carries a CVSS score of 5.4, indicating a medium severity. Its attack vector is adjacent network (AV:A), meaning an attacker needs to be on the same local network as the victim. The attack complexity is medium (AC:M), and successful exploitation could lead to partial compromise of confidentiality, integrity, and availability (C:P/I:P/A:P). There is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. The vulnerability has received minimal community attention and media coverage, suggesting a low profile despite its potential impact.