CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.9. It affects Android. It may be remotely exploitable.
CVE
CVE-2017-5606
Severity
MEDIUM
CVSS
5.9
EPSS
0.78%
Android
Original NVD Description
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Xabber (only if manually enabled: 1.0.30, 1.0.30 VIP, beta 1.0.3 - 1.0.74; Android).