PT-2017-11686 · Mozilla+2 · Firefox Os+2

Published 2017-11-16 · Updated 2017-11-30 · CVE-2017-11022

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Android for MSM (affected versions not specified) Firefox OS for MSM (affected versions not specified) QRD Android (affected versions not specified)

Description The issue affects user privacy by including information elements in probe requests that specify supported WiFi features, potentially exposing this information if the requests are intercepted. This could impact a significant number of devices, but the exact number is not specified.

Recommendations For Android for MSM, consider controlling the presence of information elements using an ini file to mitigate the risk of exposing user privacy. For Firefox OS for MSM, consider controlling the presence of information elements using an ini file to mitigate the risk of exposing user privacy. For QRD Android, consider controlling the presence of information elements using an ini file to mitigate the risk of exposing user privacy.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-11022

Affected Products

Android

Firefox Os

Qrd Android

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2017-11022 · Security Note
• https://source.android.com/security/bulletin/pixel/2017-11-01 · Vendor Advisory