Lucene search

K
cveSamsungMobileCVE-2024-20841
HistoryMar 05, 2024 - 5:15 a.m.

CVE-2024-20841

2024-03-0505:15:12
SamsungMobile
web.nvd.nist.gov
27
cve-2024-20841
samsung
insufficient privileges
security vulnerability
nvd

CVSS3

5.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

AI Score

5.1

Confidence

High

EPSS

0

Percentile

9.0%

Improper Handling of Insufficient Privileges in Samsung Account prior to version 14.8.00.3 allows local attackers to access data.

CNA Affected

[
  {
    "vendor": "Samsung Mobile",
    "product": "Samnsung Account",
    "versions": [
      {
        "status": "unaffected",
        "version": "14.8.00.3"
      }
    ],
    "defaultStatus": "affected"
  }
]

CVSS3

5.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

AI Score

5.1

Confidence

High

EPSS

0

Percentile

9.0%

Related for CVE-2024-20841