Lucene search

K
cveSamsungMobileCVE-2024-20838
HistoryMar 05, 2024 - 5:15 a.m.

CVE-2024-20838

2024-03-0505:15:11
SamsungMobile
web.nvd.nist.gov
31
samsung internet
cve-2024-20838
vulnerability
code execution
improper validation
nvd

CVSS3

6.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

AI Score

6.8

Confidence

High

EPSS

0

Percentile

9.0%

Improper validation vulnerability in Samsung Internet prior to version 24.0.3.2 allows local attackers to execute arbitrary code.

CNA Affected

[
  {
    "vendor": "Samsung Mobile",
    "product": "Samsung Internet",
    "versions": [
      {
        "status": "unaffected",
        "version": "24.0.3.2"
      }
    ],
    "defaultStatus": "affected"
  }
]

CVSS3

6.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

AI Score

6.8

Confidence

High

EPSS

0

Percentile

9.0%

Related for CVE-2024-20838