CVE-2018-9489

When wifi is switched, function sendNetworkStateChangeBroadcast of WifiStateMachine.java broadcasts an intent including detailed wifi network information. This could lead to information disclosure with no execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-77286245.

Score

CVSS 3.0 7.5 High

Status

Modified - security@android.com

Published

2018-11-06

Last modified

2024-09-16

Weaknesses

CWE-200

Affected products

• Android (Google)
• Android (Google Inc.)

References

• http://www.securitytracker.com/id/1041590
• https://wwws.nightwatchcybersecurity.com/2018/08/29/sensitive-data-exposure-via-wifi-broadcasts-in-android-os-cve-2018-…