Lucene search

[email protected]CVE-2024-29152

HistoryJun 04, 2024 - 7:19 p.m.

CVE-2024-29152

2024-06-0419:19:07

[email protected]

web.nvd.nist.gov

cve-2024-29152

nvd

security vulnerability

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.2 Medium

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

JSON

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, Exynos 990, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 2400, Exynos Modem 5123, and Exynos Modem 5300. The baseband software does not properly check states specified by the RRC (Radio Resource Control) Reconfiguration message. This can lead to disclosure of sensitive information.

Affected configurations

NVD

Node

samsungexynos_980_firmwareMatch-

AND

samsungexynos_980Match-

Node

samsungexynos_990_firmwareMatch-

AND

samsungexynos_990Match-

Node

samsungexynos_850_firmwareMatch-

AND

samsungexynos_850Match-

Node

samsungexynos_1080_firmwareMatch-

AND

samsungexynos_1080Match-

Node

samsungexynos_2100_firmwareMatch-

AND

samsungexynos_2100Match-

Node

samsungexynos_2200_firmwareMatch-

AND

samsungexynos_2200Match-

Node

samsungexynos_1280_firmwareMatch-

AND

samsungexynos_1280Match-

Node

samsungexynos_1380_firmwareMatch-

AND

samsungexynos_1380Match-

Node

samsungexynos_1330_firmwareMatch-

AND

samsungexynos_1330Match-

Node

samsungexynos_2400_firmwareMatch-

AND

samsungexynos_2400Match-

Node

samsungexynos_9110_firmwareMatch-

AND

samsungexynos_9110Match-

Node

samsungexynos_w920_firmwareMatch-

AND

samsungexynos_w920Match-

Node

samsungexynos_w930_firmwareMatch-

AND

samsungexynos_w930Match-

Node

samsungexynos_modem_5123_firmwareMatch-

AND

samsungexynos_modem_5123Match-

Node

samsungexynos_modem_5300_firmwareMatch-

AND

samsungexynos_modem_5300Match-

Node

samsungexynos_auto_t5123_firmwareMatch-

AND

samsungexynos_auto_t5123Match-

CPENameOperatorVersion
samsung:exynos_980_firmwaresamsung exynos 980 firmwareeq-

CPE	Name	Operator	Version
samsung:exynos_980_firmware	samsung exynos 980 firmware	eq	-

References

semiconductor.samsung.com/support/quality-support/product-security-updates/

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.2 Medium

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

JSON

Related for CVE-2024-29152

nvd1 cvelist1