Lucene search

K
cveSamsungMobileCVE-2024-34602
HistoryJul 08, 2024 - 7:15 a.m.

CVE-2024-34602

2024-07-0807:15:02
SamsungMobile
web.nvd.nist.gov
31
samsung messages
implicit intent
sensitive communication
local attackers
vulnerability
user interaction

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AI Score

3.9

Confidence

High

EPSS

0.001

Percentile

21.0%

Use of implicit intent for sensitive communication in Samsung Messages prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information. User interaction is required for triggering this vulnerability.

Affected configurations

Nvd
Node
samsungandroidMatch12.0-
OR
samsungandroidMatch12.0smr-apr-2022-r1
OR
samsungandroidMatch12.0smr-apr-2023-r1
OR
samsungandroidMatch12.0smr-apr-2024-r1
OR
samsungandroidMatch12.0smr-aug-2022-r1
OR
samsungandroidMatch12.0smr-aug-2023-r1
OR
samsungandroidMatch12.0smr-dec-2021-r1
OR
samsungandroidMatch12.0smr-dec-2022-r1
OR
samsungandroidMatch12.0smr-dec-2023-r1
OR
samsungandroidMatch12.0smr-feb-2022-r1
OR
samsungandroidMatch12.0smr-feb-2023-r1
OR
samsungandroidMatch12.0smr-feb-2024-r1
OR
samsungandroidMatch12.0smr-jan-2022-r1
OR
samsungandroidMatch12.0smr-jan-2023-r1
OR
samsungandroidMatch12.0smr-jan-2024-r1
OR
samsungandroidMatch12.0smr-jul-2022-r1
OR
samsungandroidMatch12.0smr-jul-2023-r1
OR
samsungandroidMatch12.0smr-jun-2022-r1
OR
samsungandroidMatch12.0smr-jun-2023-r1
OR
samsungandroidMatch12.0smr-jun-2024-r1
OR
samsungandroidMatch12.0smr-mar-2022-r1
OR
samsungandroidMatch12.0smr-mar-2023-r1
OR
samsungandroidMatch12.0smr-mar-2024-r1
OR
samsungandroidMatch12.0smr-may-2022-r1
OR
samsungandroidMatch12.0smr-may-2023-r1
OR
samsungandroidMatch12.0smr-may-2024-r1
OR
samsungandroidMatch12.0smr-nov-2021-r1
OR
samsungandroidMatch12.0smr-nov-2022-r1
OR
samsungandroidMatch12.0smr-nov-2023-r1
OR
samsungandroidMatch12.0smr-oct-2022-r1
OR
samsungandroidMatch12.0smr-oct-2023-r1
OR
samsungandroidMatch12.0smr-sep-2022-r1
OR
samsungandroidMatch12.0smr-sep-2023-r1
OR
samsungandroidMatch13.0-
OR
samsungandroidMatch13.0smr-apr-2023-r1
OR
samsungandroidMatch13.0smr-apr-2024-r1
OR
samsungandroidMatch13.0smr-aug-2023-r1
OR
samsungandroidMatch13.0smr-dec-2022-r1
OR
samsungandroidMatch13.0smr-dec-2023-r1
OR
samsungandroidMatch13.0smr-feb-2023-r1
OR
samsungandroidMatch13.0smr-feb-2024-r1
OR
samsungandroidMatch13.0smr-jan-2023-r1
OR
samsungandroidMatch13.0smr-jan-2024-r1
OR
samsungandroidMatch13.0smr-jul-2023-r1
OR
samsungandroidMatch13.0smr-jun-2023-r1
OR
samsungandroidMatch13.0smr-jun-2024-r1
OR
samsungandroidMatch13.0smr-mar-2023-r1
OR
samsungandroidMatch13.0smr-mar-2024-r1
OR
samsungandroidMatch13.0smr-may-2023-r1
OR
samsungandroidMatch13.0smr-may-2024-r1
OR
samsungandroidMatch13.0smr-nov-2022-r1
OR
samsungandroidMatch13.0smr-nov-2023-r1
OR
samsungandroidMatch13.0smr-oct-2022-r1
OR
samsungandroidMatch13.0smr-oct-2023-r1
OR
samsungandroidMatch13.0smr-sep-2023-r1
OR
samsungandroidMatch14.0-
OR
samsungandroidMatch14.0smr-apr-2023-r1
OR
samsungandroidMatch14.0smr-apr-2024-r1
OR
samsungandroidMatch14.0smr-aug-2023-r1
OR
samsungandroidMatch14.0smr-dec-2022-r1
OR
samsungandroidMatch14.0smr-dec-2023-r1
OR
samsungandroidMatch14.0smr-feb-2023-r1
OR
samsungandroidMatch14.0smr-jan-2023-r1
OR
samsungandroidMatch14.0smr-jan-2024-r1
OR
samsungandroidMatch14.0smr-jul-2023-r1
OR
samsungandroidMatch14.0smr-jun-2023-r1
OR
samsungandroidMatch14.0smr-jun-2024-r1
OR
samsungandroidMatch14.0smr-mar-2023-r1
OR
samsungandroidMatch14.0smr-mar-2024-r1
OR
samsungandroidMatch14.0smr-may-2023-r1
OR
samsungandroidMatch14.0smr-may-2024-r1
OR
samsungandroidMatch14.0smr-nov-2022-r1
OR
samsungandroidMatch14.0smr-nov-2023-r1
OR
samsungandroidMatch14.0smr-oct-2022-r1
OR
samsungandroidMatch14.0smr-oct-2023-r1
OR
samsungandroidMatch14.0smr-sep-2023-r1
VendorProductVersionCPE
samsungandroid12.0cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:*
samsungandroid12.0cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*
samsungandroid12.0cpe:2.3:o:samsung:android:12.0:smr-apr-2023-r1:*:*:*:*:*:*
samsungandroid12.0cpe:2.3:o:samsung:android:12.0:smr-apr-2024-r1:*:*:*:*:*:*
samsungandroid12.0cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*
samsungandroid12.0cpe:2.3:o:samsung:android:12.0:smr-aug-2023-r1:*:*:*:*:*:*
samsungandroid12.0cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*
samsungandroid12.0cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*
samsungandroid12.0cpe:2.3:o:samsung:android:12.0:smr-dec-2023-r1:*:*:*:*:*:*
samsungandroid12.0cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*
Rows per page:
1-10 of 761

CNA Affected

[
  {
    "vendor": "Samsung Mobile",
    "product": "Samsung Mobile Devices",
    "versions": [
      {
        "status": "unaffected",
        "version": "SMR Jul-2024 Release in Android 12, 13, 14"
      }
    ],
    "defaultStatus": "affected"
  }
]

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AI Score

3.9

Confidence

High

EPSS

0.001

Percentile

21.0%

Related for CVE-2024-34602