CVE-2017-3214

CVE-2017-3214 describes a critical vulnerability in the Milwaukee ONE-KEY Android mobile application where the master token is stored in plaintext within the application's binary. This allows an attacker to easily extract sensitive authentication credentials. With a CVSS score of 7.5 (HIGH), this vulnerability is remotely exploitable with low attack complexity, potentially leading to a complete compromise of confidentiality. The primary impact is unauthorized access to user accounts or associated services. There is no evidence of active exploitation, nor is there publicly available exploit code in Metasploit, Nuclei, or ExploitDB. The vulnerability has received minimal community discussion or media coverage, suggesting a low profile despite its severity.