CVE-2017-0601
MEDIUMGoogle Android - Incorrect Permission Assignment
Title source: ruleDescription
An Elevation of Privilege vulnerability in Bluetooth could potentially enable a local malicious application to accept harmful files shared via bluetooth without user permission. This issue is rated as Moderate due to local bypass of user interaction requirements. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-35258579.
Exploits (1)
github
WORKING POC
5 stars
by heeeeen · javapoc
https://github.com/heeeeen/CVE-PoC/tree/master/CVE-2017-0601
Scores
CVSS v3
5.5
EPSS
0.0004
EPSS Percentile
10.3%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Classification
CWE
CWE-732
Status
draft
Affected Products (4)
google/android
google/android
google/android
google/android
Timeline
Published
May 12, 2017
Tracked Since
Feb 18, 2026