CVE-2017-18666: High severity android vulnerability
Published Apr 7, 2020
·Updated
An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.x) software. Applications can send arbitrary premium SMS messages. The Samsung ID is SVE-2017-8701 (June 2017).
Affected Software
8 affected components
Google Android=4.4
Google Android=5.0
Google Android=5.1
Google Android=6.0
Google Android=7.0
Google Android=7.1.0
Google Android=7.1.1
Google Android=7.1.2
Event History
Apr 7, 2020
CVE Published
via MITRE·02:49 PM
Data Sourced
via MITRE·02:49 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-18666?
CVE-2017-18666 is classified as a high severity vulnerability that allows applications to send arbitrary premium SMS messages.
2
How do I fix CVE-2017-18666?
To mitigate CVE-2017-18666, users should update their Samsung mobile devices to the latest software version provided by the manufacturer.
3
Which devices are affected by CVE-2017-18666?
CVE-2017-18666 affects Samsung mobile devices running Android versions 4.4 through 7.x.
4
What potential impact does CVE-2017-18666 have on users?
The impact of CVE-2017-18666 may include unauthorized charges to users' accounts due to unexpected premium SMS messaging.
5
When was CVE-2017-18666 disclosed?
CVE-2017-18666 was disclosed in June 2017.