CVE-2017-0423

MEDIUM

Google Android - Incorrect Permission Assignment

Title source: rule
STIX 2.1

Description

An elevation of privilege vulnerability in Bluetooth could enable a proximate attacker to manage access to documents on the device. This issue is rated as Moderate because it first requires exploitation of a separate vulnerability in the Bluetooth stack. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32612586.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/96102
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1037798

Scores

CVSS v3 5.3
EPSS 0.0008
EPSS Percentile 24.3%
Attack Vector ADJACENT_NETWORK
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-732
Status published
Products (17)
google/android 5.0
google/android 5.0.1
google/android 5.0.2
google/android 5.1
google/android 5.1.0
google/android 5.1.1
google/android 6.0
google/android 6.0.1
google/android 7.0
google/android 7.1.0
... and 7 more
Published Feb 08, 2017
Tracked Since Feb 18, 2026