CVE-2019-18800

CVE-2019-18800 describes a critical vulnerability in Viber through version 11.7.0.5, allowing a remote attacker to hijack a victim's account by intercepting unencrypted network traffic. The attack involves capturing cleartext device information, including a unique device identifier (udid), and then using this udid to impersonate the victim during Viber registration on the attacker's device. With a CVSS score of 8.8 (High), this vulnerability has a network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.