CVE-2017-12695: Gm Shanghai Onstar

High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days.

An Improper Authentication issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1. Successful exploitation of this vulnerability may allow an attacker to subvert security mechanisms and reset a user account password.

Affected products

• Gm Shanghai Onstar: version 7.1 only

Published 2018-01-09. Last modified 2026-06-17.