CVE-2014-7723: The Carnegie Mellon Silicon Valley (aka edu.cmu.sv.mobile) application 0.1 for Android does not verify X.50...

Security readout for executives and security teams

This CVE affects the Carnegie Mellon Silicon Valley Android app version 0.1. The app failed to verify server TLS certificates, so a person controlling a network path could impersonate a server and potentially read sensitive information sent by the app. Exposure is likely limited to environments where this specific old Android application version is installed or still used. The source bundle does not identify broader Carnegie Mellon products or other versions as affected. Treat as a targeted legacy mobile exposure. Prioritize only if the app exists in your environment or handled sensitive data. There is no source evidence of active exploitation, but certificate validation failures can directly expose confidential traffic. Mitigation focus: Inventory Android devices for edu.cmu.sv.mobile version 0.1.; Remove or replace the app if it is unsupported or unnecessary.; Check vendor or CERT guidance for any named update or workaround..

Prepared

Jun 14, 2026, 06:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.