CVE-2017-3218

Severity: high (CVSS 8.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-06-21 · updated 2026-06-17
Weakness: CWE-295

Description

Samsung Magician 5.0 fails to validate TLS certificates for HTTPS software update traffic. Prior to version 5.0, Samsung Magician uses HTTP for software updates.

Affected products

Samsung Magician: 5.0

References

http://www.securityfocus.com/bid/99081
https://www.kb.cert.org/vuls/id/846320
http://www.securityfocus.com/bid/99081
https://www.kb.cert.org/vuls/id/846320

Get alerted when CVE-2017-3218 or the next vulnerability affects your stack