CVE-2017-3218: Samsung Magician

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Samsung Magician 5.0 fails to validate TLS certificates for HTTPS software update traffic. Prior to version 5.0, Samsung Magician uses HTTP for software updates.

Affected products

• Samsung Magician: version 5.0 only

Published 2017-06-21. Last modified 2026-06-17.