CVE-2017-13160:A remote code execution vulnerability in the Android system (Bluetooth) affecting multiple versions of Android.

splash
Back

Description Preview

CVE-2017-13160 is a vulnerability in the Android operating system that allows for remote code execution through the Bluetooth component. This vulnerability affects Android versions 7.0, 7.1.1, 7.1.2, and 8.0. An attacker could exploit this vulnerability to execute arbitrary code on the affected device, potentially leading to unauthorized access and control over the device. The Android ID associated with this vulnerability is A-37160362.

Overview

  • CVE ID: CVE-2017-13160
  • Vendor: Google Inc.
  • Affected Products: Android
  • Affected Versions:
    • 7.0
    • 7.1.1
    • 7.1.2
    • 8.0
  • Date Public: December 4, 2017
  • Problem Type: Remote code execution
  • Description: The vulnerability exists in the Bluetooth component of the Android system, allowing attackers to execute arbitrary code remotely.

Remediation

Users of affected Android versions are advised to update their devices to the latest available version that includes security patches addressing this vulnerability. Google has released updates to mitigate the risk associated with this vulnerability. It is recommended to regularly check for and apply security updates to ensure device protection.

References

  1. SecurityFocus BID 102109
  2. Android Security Bulletin - December 2017

These references provide additional context and details regarding the vulnerability and the corresponding security updates.

Industry ExposureMost to least
This section illustrates the prevalence of a specific Common Vulnerabilities and Exposures (CVE) across various industries based on customer reports. The ranking displays industries from the most to least affected by this particular vulnerability, offering valuable insight into where this CVE has been most frequently observed. This information can help organizations within these sectors prioritize their security efforts, understand their relative risk exposure compared to their peers, and focus remediation strategies where they are most needed. By understanding the industry-specific impact, organizations can make more informed decisions regarding patching, resource allocation, and overall risk management related to this CVE.

  1. Manufacturing: Low
    Manufacturing
  2. Public Administration: Low
    Public Administration
  3. Educational Services: Low
    Educational Services
  4. Finance and Insurance: Low
    Finance and Insurance
  5. Transportation & Warehousing: Low
    Transportation & Warehousing
  6. Health Care & Social Assistance: Low
    Health Care & Social Assistance
  7. Information: Low
    Information
  8. Management of Companies & Enterprises: Low
    Management of Companies & Enterprises
  9. Other Services (except Public Administration): Low
    Other Services (except Public Administration)
  10. Accommodation & Food Services: Low
    Accommodation & Food Services
  11. Administrative, Support, Waste Management & Remediation Services: Low
    Administrative, Support, Waste Management & Remediation Services
  12. Agriculture, Forestry Fishing & Hunting: Low
    Agriculture, Forestry Fishing & Hunting
  13. Arts, Entertainment & Recreation: Low
    Arts, Entertainment & Recreation
  14. Construction: Low
    Construction
  15. Mining: Low
    Mining
  16. Professional, Scientific, & Technical Services: Low
    Professional, Scientific, & Technical Services
  17. Real Estate Rental & Leasing: Low
    Real Estate Rental & Leasing
  18. Retail Trade: Low
    Retail Trade
  19. Utilities: Low
    Utilities
  20. Wholesale Trade: Low
    Wholesale Trade

Focus on What Matters

  1. See Everything.
  2. Identify True Risk.
  3. Proactively Mitigate Threats.

Let's talk!

background