CVE-2017-18653: Medium severity android vulnerability

Published Apr 7, 2020

Updated

An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.x) software. The Email application allows attackers to send emails on behalf of any user via a broadcasted intent. The Samsung ID is SVE-2017-9357 (September 2017).

Affected Software

8 affected components

Google Android=4.4

Google Android=5.0

Google Android=5.1

Google Android=6.0

Google Android=7.0

Google Android=7.1.0

Google Android=7.1.1

Google Android=7.1.2

Event History

Apr 7, 2020

CVE Published

via MITRE·03:49 PM

Data Sourced

via MITRE·03:49 PM

Description

Frequently Asked Questions

What is the severity of CVE-2017-18653?

CVE-2017-18653 is considered a high-severity vulnerability due to its potential for unauthorized email transmission.

How do I fix CVE-2017-18653?

To fix CVE-2017-18653, it is recommended to update the Samsung Email application to the latest version provided by Samsung.

Which devices are affected by CVE-2017-18653?

CVE-2017-18653 affects Samsung mobile devices running Android versions 4.4 to 7.1.2.

What type of attack is associated with CVE-2017-18653?

CVE-2017-18653 allows attackers to exploit the Email application to send emails on behalf of any user.

Is there a workaround for CVE-2017-18653?

While there is no formal workaround for CVE-2017-18653, users should avoid using the Email app until they can update it.