CVE-2019-6032

Severity: high (CVSS 7.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-12-26 · updated 2026-06-17
Weakness: CWE-295

Description

The NTV News24 prior to Ver.3.0.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected products

Nippon Television Network Corporation NTV News24: before 3.0.0 — fixed in 3.0.0

How to fix

Upgrade to a fixed version: Nippon Television Network Corporation NTV News24 3.0.0. Check the vendor advisory for mitigations.

References

http://jvn.jp/en/jp/JVN01236065/index.html
https://play.google.com/store/apps/details?id=jp.co.ntv.news24&hl=en
http://jvn.jp/en/jp/JVN01236065/index.html
https://play.google.com/store/apps/details?id=jp.co.ntv.news24&hl=en

Get alerted when CVE-2019-6032 or the next vulnerability affects your stack