Bandh operates a focused commerce and logistics platform serving the photo, video, and audio retail sector, with a narrow vulnerability footprint concentrated in its B&H Photo Video Pro Audio storefront and related systems. The observed disclosures reflect application-layer concerns typical of e-commerce infrastructure. Current vulnerability counts, severity distribution, and any confirmed exploitation activity are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Bandh over time
Signals from CVEs in this vendor scope (1 CVEs).
1 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2014-7577MEDIUM The B&H Photo Video Pro Audio (aka com.bhphoto) application 2.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof | Oct 20, 2014 | 5.4 | 15 | NO | NO |
Signals from CVEs in this vendor scope (1 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Bandh.
Media articles that mention a CVE ID that affects a product developed by Bandh — matched by CVE ID, not by vendor name.