CVE-2019-17356: Infinitestudio Infinite Design

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

The Infinite Design application 3.4.12 for Android sends a username and password via TCP without any encryption during login, as demonstrated by sniffing of a public Wi-Fi network.

Affected products

• Infinitestudio Infinite Design: version 3.4.12 only

Published 2019-10-15. Last modified 2026-06-17.