CVE-2014-7773: The Cleveland Football STREAM (aka com.appstronautme.clevelandfootballstream) application 2.1.0 for Android...

Security readout for executives and security teams

CVE-2014-7773 affects the Cleveland Football STREAM Android app version 2.1.0. The app reportedly fails to verify SSL server certificates, so a network attacker could impersonate a server and read sensitive data sent through the app. Exposure appears limited to Android devices running Cleveland Football STREAM 2.1.0. Risk is most relevant when affected devices use networks where traffic interception is plausible, such as public Wi-Fi or compromised local networks. Treat this as a targeted mobile-app hygiene issue, not a broad enterprise emergency. Prioritize confirmation in mobile fleets, removal where found, and vendor guidance review because the bundle provides no patch or exploitation evidence. Mitigation focus: Identify and remove Cleveland Football STREAM 2.1.0 from managed Android devices unless vendor guidance confirms a fix.; Check vendor or app-store guidance for a certificate-validation update before reinstalling or approving use.; Restrict the app through mobile device management where business use is unnecessary..

Prepared

Jun 14, 2026, 06:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.