CVE-2017-4895 describes a vulnerability in the Airwatch Agent for Android that allows a device to bypass root detection. This high-severity flaw (CVSS 8.8) could enable an enrolled device to gain unrestricted control over local Airwatch security controls and data. The attack requires local access and low privileges, but does not involve user interaction. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has received some community discussion and media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:vmware:airwatch_agent:-:*:*:*:*:android:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:vmware:airwatch_inbox:-:*:*:*:*:android:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.