Lucene search

[email protected]CVE-2021-24046

HistoryJan 14, 2022 - 6:15 p.m.

CVE-2021-24046

2022-01-1418:15:09

CWE-471

CWE-425

[email protected]

web.nvd.nist.gov

cve-2021-24046

ray-ban

stories

device software

logic flaw

facebook view

application

video capture

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.7%

JSON

A logic flaw in Ray-Ban® Stories device software allowed some parameters like video capture duration limit to be modified through the Facebook View application. This issue affected versions of device software before 2107460.6810.0.

Affected configurations

NVD

Node

ray-banstories_rw4003_65582v_48-23_firmwareRange<2107460.6810.0

AND

ray-banstories_rw4003_65582v_48-23Match-

Node

ray-banstories_rw4002_601\/71_50-22_firmwareRange<2107460.6810.0

AND

ray-banstories_rw4002_601\/71_50-22Match-

Node

ray-banstories_rw4005_656013_51-20_firmwareRange<2107460.6810.0

AND

ray-banstories_rw4005_656013_51-20Match-

Node

ray-banstories_rw4005_6563m3_51-20_firmwareRange<2107460.6810.0.

AND

ray-banstories_rw4005_6563m3_51-20Match-

CPENameOperatorVersion
ray-ban:stories_rw4003_65582v_48-23_firmwareray-ban stories rw4003 65582v 48-23 firmwarelt2107460.6810.0

CPE	Name	Operator	Version
ray-ban:stories_rw4003_65582v_48-23_firmware	ray-ban stories rw4003 65582v 48-23 firmware	lt	2107460.6810.0

CNA Affected

[
  {
    "product": "Ray-Ban® Stories Smart Glasses",
    "vendor": "Meta Platforms, Inc",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "unaffected",
        "version": "2107460.6810.0",
        "versionType": "custom"
      },
      {
        "lessThan": "2107460.6810.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.facebook.com/security/advisories/cve-2021-24046

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.7%

JSON

Related for CVE-2021-24046

cvelist1 nvd1 prion1