CVE-2017-17436

An issue was discovered in the software on Vaultek Gun Safe VT20i products. There is no encryption of the session between the Android application and the safe. The website and marketing materials advertise that this communication channel is encrypted with "Highest Level Bluetooth Encryption" and "Data transmissions are secure via AES256 bit encryption." These claims, however, are not true. Moreover, AES256 bit encryption is not supported in the Bluetooth Low Energy (BLE) standard, so it would have to be at the application level. This lack of encryption allows an individual to learn the passcode by eavesdropping on the communications between the application and the safe.

• CWE-326

• https://vaulteksafe.com/index.php/cve-2017-17435/Mitigation, Vendor Advisory
• https://www.twosixlabs.com/bluesteal-popping-gatt-safes/Third Party Advisory
• https://vaulteksafe.com/index.php/cve-2017-17435/Mitigation, Vendor Advisory
• https://www.twosixlabs.com/bluesteal-popping-gatt-safes/Third Party Advisory

Published

Dec 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-17430Sangoma NetBorder / Vega Session Controller before 2.3.12-80…
• CVE-2017-17431GeniXCMS 1.1.5 has XSS via the from, id, lang, menuid, mod, …
• CVE-2017-17432OpenAFS 1.x before 1.6.22 does not properly validate Rx ack …
• CVE-2017-17433The recv_files function in receiver.c in the daemon in rsync…
• CVE-2017-17434The daemon in rsync 3.1.2, and 3.1.3-development before 2017…
• CVE-2017-17435An issue was discovered in the software on Vaultek Gun Safe …
• CVE-2017-17439In Heimdal through 7.4, remote unauthenticated attackers are…
• CVE-2017-17440GNU Libextractor 1.6 allows remote attackers to cause a deni…
• CVE-2017-17442In BlackBerry UEM Management Console version 12.7.1 and earl…
• CVE-2017-17443OPC Foundation Local Discovery Server (LDS) 1.03.370 require…
• CVE-2017-17446The Mem_File_Reader::read_avail function in Data_Reader.cpp …
• CVE-2017-17448net/netfilter/nfnetlink_cthelper.c in the Linux kernel throu…