CVE-2014-7731: The Radio de la Cato (aka com.radio.de.la.cato) application 2.0 for Android does not verify X.509 certifica...

Security readout for executives and security teams

Radio de la Cato 2.0 for Android failed to verify SSL server certificates. A network-positioned attacker could impersonate the app’s server and capture sensitive information. Business urgency depends on whether managed devices still have this old Android app installed. Exposure appears limited to devices running Radio de la Cato 2.0 for Android. The source bundle does not identify broader affected products, CPEs, enterprise platforms, or a fixed version. Treat as a targeted mobile-app exposure issue, not a broad infrastructure emergency. Prioritize inventory and removal if the app exists on managed devices, especially where users handle sensitive data on public networks. Mitigation focus: Inventory managed Android devices for com.radio.de.la.cato version 2.0.; Remove or disable the affected app where business use is unnecessary.; Check vendor or app-store guidance for any fixed release..

Prepared

Jun 14, 2026, 06:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.