CVEs-PoC/2017/CVE-2017-3218.md

### [CVE-2017-3218](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3218)
![](https://img.shields.io/static/v1?label=Product&message=Magician&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C5.1%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-295&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-311&color=brightgreen)

### Description

Samsung Magician 5.0 fails to validate TLS certificates for HTTPS software update traffic. Prior to version 5.0, Samsung Magician uses HTTP for software updates.

### POC

#### Reference
- https://www.kb.cert.org/vuls/id/846320

#### Github
No PoCs found on GitHub currently.