What’s Vulnerable › Vulnerabilities

CVE-2017-17945

• Severity: critical (CVSS 9.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-06-24 · updated 2026-06-17
• Weakness: CWE-295

Description

The ASUS HiVivo aspplication before 5.6.27 for ASUS Watch has Missing SSL Certificate Validation.

Affected products

• ASUS Hivivo: before 5.6.27 — fixed in 5.6.27
• ASUS Vivobaby: before 1.1.09 — fixed in 1.1.09

How to fix

Upgrade to a fixed version: ASUS Hivivo 5.6.27; ASUS Vivobaby 1.1.09. Check the vendor advisory for mitigations.

References

• http://firstsight.me/2017/12/lack-of-binary-protection-at-asus-vivo-baby-and-hivivo-for-android-that-could-result-of-several-security-issues
• http://firstsight.me/2017/12/lack-of-binary-protection-at-asus-vivo-baby-and-hivivo-for-android-that-could-result-of-several-security-issues

Get alerted when CVE-2017-17945 or the next vulnerability affects your stack