CVE-2017-7978

EUVD-2017-16948
Samsung Android devices with L(5.0/5.1), M(6.0), and N(7.x) software allow attackers to obtain sensitive information by reading a world-readable log file after an unexpected reboot. The Samsung ID is SVE-2017-8290.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 53%
Affected Products (NVD)
VendorProductVersion
samsungsamsung_mobile
5.0
samsungsamsung_mobile
5.1
samsungsamsung_mobile
6.0
samsungsamsung_mobile
7.0
samsungsamsung_mobile
7.1
samsungsamsung_mobile
7.1.1
samsungsamsung_mobile
7.1.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://security.samsungmobile.com/smrupdate.html#SMR-APR-2017
http://security.samsungmobile.com/smrupdate.html#SMR-APR-2017