VULNERABILITY INTELLIGENCE
CVE-2017-18677
CVSS score7.5 HIGH
EPSS probability0.33%
CISA KEVNot currently listed
Published2020-04-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Description
An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. Because of an unprotected Intent, an attacker can reset the configuration of certain applications. The Samsung ID is SVE-2016-7142 (April 2017).
Weakness classification
- CWE-862: Missing Authorization
Primary references
- cve@mitre.org — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory