CVE-2017-17436

CVE-2017-17436 describes a critical vulnerability in Vaultek Gun Safe VT20i products where the communication between the Android application and the safe lacks encryption, despite manufacturer claims of "Highest Level Bluetooth Encryption" and "AES256 bit encryption." This allows an attacker to eavesdrop on communications and learn the safe's passcode. With a CVSS score of 8.8 (High), the vulnerability is easily exploitable over an adjacent network (AV:A, AC:L) with no user interaction required, leading to high confidentiality, integrity, and availability impacts (C:H, I:H, A:H). There is no evidence of active exploitation (KEV: No), nor are there public exploit modules like Metasploit or Nuclei, though it has garnered some community discussion and media attention.