U.S. flag

CVE-2017-20200 Detail

Description

A vulnerability has been found in Coinomi up to 1.7.6. This issue affects some unknown processing. Such manipulation leads to cleartext transmission of sensitive information. The attack can be launched remotely. This attack is characterized by high complexity. The exploitability is assessed as difficult. The exploit has been disclosed to the public and may be used. The vendor replied with: "(...) there isn't any security implication associated with your findings."

Metrics

NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.
CVSS 4.0 Severity and Vector Strings:

NIST CVSS score
NIST: NVD
N/A
NVD assessment not yet provided.
Nist CVSS score does not match with CNA score
CNA:  VulDB
CVSS-BT 2.9 LOW
Vector:  CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

URLSource(s)Tag(s)
https://vuldb.com/?ctiid.325143

Thank you for visiting NIST.

We hope your visit was informative.

We have provided a link to this site because it has information that may be of interest to our users. NIST does not necessarily endorse the views expressed or the facts presented on this site. Further, NIST does not endorse any commercial products that may be advertised or available on this site.

You will now be directed to:
https://vuldb.com/?ctiid.325143

OKCancel

VulDB
https://vuldb.com/?id.325143

Thank you for visiting NIST.

We hope your visit was informative.

We have provided a link to this site because it has information that may be of interest to our users. NIST does not necessarily endorse the views expressed or the facts presented on this site. Further, NIST does not endorse any commercial products that may be advertised or available on this site.

You will now be directed to:
https://vuldb.com/?id.325143

OKCancel

VulDB
https://vuldb.com/?submit.653875

Thank you for visiting NIST.

We hope your visit was informative.

We have provided a link to this site because it has information that may be of interest to our users. NIST does not necessarily endorse the views expressed or the facts presented on this site. Further, NIST does not endorse any commercial products that may be advertised or available on this site.

You will now be directed to:
https://vuldb.com/?submit.653875

OKCancel

VulDB
https://web.archive.org/web/20171013065745/https://github.com/Coinomi/coinomi-android/issues/213

Thank you for visiting NIST.

We hope your visit was informative.

We have provided a link to this site because it has information that may be of interest to our users. NIST does not necessarily endorse the views expressed or the facts presented on this site. Further, NIST does not endorse any commercial products that may be advertised or available on this site.

OKCancel

VulDB
https://web.archive.org/web/20171013065745/https://github.com/Coinomi/coinomi-android/issues/213#issuecomment-332371549

Thank you for visiting NIST.

We hope your visit was informative.

We have provided a link to this site because it has information that may be of interest to our users. NIST does not necessarily endorse the views expressed or the facts presented on this site. Further, NIST does not endorse any commercial products that may be advertised or available on this site.

OKCancel

VulDB
https://www.reddit.com/r/Bitcoin/comments/72yvnj/so_coinomis_official_response_on_the/

Thank you for visiting NIST.

We hope your visit was informative.

We have provided a link to this site because it has information that may be of interest to our users. NIST does not necessarily endorse the views expressed or the facts presented on this site. Further, NIST does not endorse any commercial products that may be advertised or available on this site.

OKCancel

VulDB
https://www.reddit.com/r/CryptoCurrency/comments/72osq7/security_warning_coinomi_wallet_transmits_all/dnkhpob/

Thank you for visiting NIST.

We hope your visit was informative.

We have provided a link to this site because it has information that may be of interest to our users. NIST does not necessarily endorse the views expressed or the facts presented on this site. Further, NIST does not endorse any commercial products that may be advertised or available on this site.

OKCancel

VulDB

Weakness Enumeration

CWE-IDCWE NameSource
CWE-310 Cryptographic Issues Provider acceptance levelVulDB
CWE-319 Cleartext Transmission of Sensitive Information Provider acceptance levelVulDB

Affected Products

Source: VulDB(hide)
VendorProductVersions
n/a CoinomiAffected 1.7.0
Affected 1.7.1
Affected 1.7.2
Affected 1.7.3
Affected 1.7.4
Viewing 5 of 7 versions. View all

Change History

4 change records foundshow changes

Quick Info

CVE Dictionary Entry:
CVE-2017-20200
NVD Published Date:
Sep 23, 2025
NVD Last Modified:
Jun 17, 2026
Source:
VulDB