VULNERABILITY INTELLIGENCE

CVE-2017-3218

CVSS score8.8 HIGH
EPSS probability0.34%
CISA KEVNot currently listed
Published2017-06-21
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Samsung Magician 5.0 fails to validate TLS certificates for HTTPS software update traffic. Prior to version 5.0, Samsung Magician uses HTTP for software updates.

Weakness classification

  • CWE-295: Improper Certificate Validation
  • CWE-311: Missing Encryption of Sensitive Data
  • CWE-345: Insufficient Verification of Data Authenticity

Primary references