Lucene search

K
cve[email protected]CVE-2024-20829
HistoryMar 05, 2024 - 5:15 a.m.

CVE-2024-20829

2024-03-0505:15:08
web.nvd.nist.gov
26
cve-2024-20829
samsung browser
deeplink
remote code execution
nvd

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

Missing proper interaction for opening deeplink in Samsung Internet prior to version v24.0.0.0 allows remote attackers to open an application without proper interaction.

CNA Affected

[
  {
    "vendor": "Samsung Mobile",
    "product": "Samsung Internet",
    "versions": [
      {
        "status": "unaffected",
        "version": "24.0.0.0"
      }
    ],
    "defaultStatus": "affected"
  }
]

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

Related for CVE-2024-20829