CVE-2017-20200 Coinomi cleartext transmission
An attacker can intercept sensitive information transmitted in cleartext by the Coinomi mobile wallet, despite vendor claims of no security implication.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-20200?
CVE-2017-20200 is a medium-severity vulnerability in Coinomi, published on 23 Sep 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability has been found in Coinomi up to 1.7.6. This issue affects some unknown processing. Such manipulation leads to cleartext transmission of sensitive information. The attack can be launched remotely. This attack is characterized by high complexity. The exploitability is assessed as difficult. The exploit has been disclosed to the public and may be used. The vendor replied with: "(...) there isn't any security implication associated with your findings."
Which versions are affected by CVE-2017-20200?
How do I fix CVE-2017-20200?
No fix has been published for CVE-2017-20200 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-20200 being exploited?
There is no known exploitation of CVE-2017-20200 in the wild and no public exploit code.
Sources
Also known as GHSA-h8gp-rgr6-x396.