Lucene search

SamsungMobileCVE-2024-34636

HistoryAug 07, 2024 - 2:15 a.m.

CVE-2024-34636

2024-08-0702:15:40

SamsungMobile

web.nvd.nist.gov

samsung email

implicit intent

sensitive information

local attackers

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

4.3

Confidence

High

EPSS

Percentile

9.5%

JSON

Use of implicit intent for sensitive communication in Samsung Email prior to version 6.1.94.2 allows local attackers to get sensitive information.

Affected configurations

Nvd

Node

samsungemailRange<6.1.94.2

VendorProductVersionCPE
samsungemail*cpe:2.3:a:samsung:email:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
samsung	email	*	cpe:2.3:a:samsung:email::::::::

CNA Affected

[
  {
    "vendor": "Samsung Mobile",
    "product": "Samsung Email",
    "versions": [
      {
        "status": "unaffected",
        "version": "6.1.94.2"
      }
    ],
    "defaultStatus": "affected"
  }
]

References

security.samsungmobile.com/serviceWeb.smsb?year=2024&month=08

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

4.3

Confidence

High

EPSS

Percentile

9.5%

JSON

Related for CVE-2024-34636