Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
  • Support the projectPage
Back

CVE-2017-2748

A potential security vulnerability caused by the use of insecure (http) transactions during login has been identified with early versions…

Description

A potential security vulnerability caused by the use of insecure (http) transactions during login has been identified with early versions of the Isaac Mizrahi Smartwatch mobile app. HP has no access to customer data as a result of this issue.

Timeline

  1. ID reserved

    By hp

  2. · 2 years later

    Published

  3. · 5 years later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2017-2748, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified3.0High7.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS (exploitation in 30 days)
1.9% · top 20% of all CVEs (9 Nov 2026)
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Affected products

  • Isaac Mizrahi · Isaac Mizrahi Smartwatch Mobile App

    • affected Isaac Mizrahi iOS app versions 1.0.2.10
    • affected 1.2.2.12
    • affected 1.3.7
    • affected and 1.4.8. Isaac Mizrahi Android app versions 1.0.201601214
    • affected 1.2.2016040820
    • affected 1.3.2016052319
    • affected 1.4.2016072601

References

1

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2017-2748 badge
[![CVE-2017-2748](https://cveledger.app/badge/CVE-2017-2748.svg)](https://cveledger.app/cve/CVE-2017-2748)

Record last updated .