PT-2018-1200
CVE-2017-14911
·
Published
2018-01-02
·
Updated
2018-04-27
Description by
CVSS 2.0
10
HighMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Android versions prior to 2018-01-05
Description
The issue is related to the XBL loader skipping the authentication of device config in Android. This can potentially allow a remote attacker to impact the confidentiality, integrity, and availability of protected information.
Recommendations
For Android versions prior to 2018-01-05, update to a version released after 2018-01-05 to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾