Back
CVE-2017-20200
Coinomi cleartext transmission
Medium6.3EPSS 0.26%
- Published
- Updated
- Reserved
- Assigned by
- VulDB
Description
A vulnerability has been found in Coinomi up to 1.7.6. This issue affects some unknown processing. Such manipulation leads to cleartext transmission of sensitive information. The attack can be launched remotely. This attack is characterized by high complexity. The exploitability is assessed as difficult. The exploit has been disclosed to the public and may be used. The vendor replied with: "(...) there isn't any security implication associated with your findings."
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| VulDBCNA (assigner) | 4.0 | Medium6.3 | CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P |
| VulDBCNA (assigner) | 3.1 | Low3.7 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C |
| VulDBCNA (assigner) | 3.0 | Low3.7 | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C |
| VulDBCNA (assigner) | 2.0 | Low2.6 | AV:N/AC:H/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:C |
| NVDNVD · Deferred | 4.0 | Low2.9 | CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
- EPSS (exploitation in 30 days)
- 0.26% · top 82% of all CVEs (4 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.3.
Weakness
Affected products
Coinomi
- affected 1.7.0
- affected 1.7.1
- affected 1.7.2
- affected 1.7.3
- affected 1.7.4
- affected 1.7.5
- affected 1.7.6
References (7)
- VDB-325143 | Coinomi cleartext transmission (opens in a new tab)vdb-entry
- VDB-325143 | CTI Indicators (IOB, IOC, TTP) (opens in a new tab)signaturepermissions-required
- Submit #653875 | COINOMI LTD Coinomi <=1.7.6 Cleartext Transmission of Sensitive Information (information dis (opens in a new tab)third-party-advisory
- https://web.archive.org/web/20171013065745/https://github.com/Coinomi/coinomi-android/issues/213 (opens in a new tab)broken-linkissue-tracking
- https://www.reddit.com/r/CryptoCurrency/comments/72osq7/security_warning_coinomi_wallet_transmits_all/dnkhpob/ (opens in a new tab)related
- https://web.archive.org/web/20171013065745/https://github.com/Coinomi/coinomi-android/issues/213#issuecomment-332371549 (opens in a new tab)exploitissue-tracking
- https://www.reddit.com/r/Bitcoin/comments/72yvnj/so_coinomis_official_response_on_the/ (opens in a new tab)related
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2017-20200)Record last updated .