CVE-2017-0601: Medium severity Google Android vulnerability

Published May 1, 2017

Updated

An Elevation of Privilege vulnerability in Bluetooth could potentially enable a local malicious application to accept harmful files shared via bluetooth without user permission. This issue is rated as Moderate due to local bypass of user interaction requirements. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-35258579.

Affected Software

5 affected components

Google Android=7.0

Google Android=7.1.0

Google Android=7.1.1

Google Android=7.1.2

Google Android

Event History

May 1, 2017

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityAffected Software

May 12, 2017

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-0601?

CVE-2017-0601 is rated as Moderate due to the potential local bypass of user interaction requirements.

Which Android versions are affected by CVE-2017-0601?

CVE-2017-0601 affects Google Android versions 7.0, 7.1.0, 7.1.1, and 7.1.2.

How do I fix CVE-2017-0601?

To mitigate CVE-2017-0601, update your device to a patched version of Android provided by manufacturers.

What type of vulnerability is CVE-2017-0601?

CVE-2017-0601 is an Elevation of Privilege vulnerability related to Bluetooth.

What can an attacker do with CVE-2017-0601?

An attacker exploiting CVE-2017-0601 can send harmful files via Bluetooth to a device without requiring user permission.