PT-2018-6655 · Google · Android

Published 2018-04-11 · Updated 2018-05-14 · CVE-2017-18072

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Android versions prior to security patch level 2018-04-05

Description: The issue affects user privacy by potentially exposing supported WiFi features through probe requests originated from the user's phone. This could allow someone to sniff the probe requests and gain information about the device.

Recommendations: For Android versions prior to security patch level 2018-04-05, apply the 2018-04-05 security patch or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-18072

Affected Products

Android

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-18072 · Security Note
• https://source.android.com/security/bulletin/2018-04-01 · Vendor Advisory
• http://securityfocus.com/bid/103671 · Note