CVE-2017-13106 - Cheetahmobile CM Launcher 3D - Theme, wallpaper, Secure, Efficient, 5.0.3, 2017-09-19, Android application uses a hard-coded key for encryption

Back Back to CVE browser

HIGH

Cheetahmobile CM Launcher 3D - Theme, wallpaper, Secure, Efficient, 5.0.3, 2017-09-19, Android application uses a hard-coded key for encryption

Published Aug 15, 2018

7.5

HIGH

CVSS 3.0

EPSS 0.99%

Description

Cheetahmobile CM Launcher 3D - Theme, wallpaper, Secure, Efficient, 5.0.3, 2017-09-19, Android application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key.

Affected products

Vendor Cheetahmobile Product CM Launcher 3D - Theme, wallpaper, Secure, Efficient Default
n/a
- Version
  5.0.3
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Cheetahmobile

CM Launcher 3D - Theme, wallpaper, Secure, Efficient

n/a

Version	Status	Constraints
5.0.3	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-798

Hard-coded Credentials

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-4623
Advisory
https://www.kb.cert.org/vuls/id/787952
third-party-advisoryx_refsource_CERT-VNThird Party AdvisoryUS Government Resource

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-4623		Advisory
https://www.kb.cert.org/vuls/id/787952		third-party-advisoryx_refsource_CERT-VNThird Party AdvisoryUS Government Resource