Lucene search
SamsungMobileCVE-2024-34645HistorySep 04, 2024 - 6:15 a.m.
CVE-2024-34645
2024-09-0406:15:13
SamsungMobile
web.nvd.nist.gov
24
themecenter
smr sep-2024 release
input validation
physical attackers
privileged applications
CVSS3
6.1
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
AI Score
6.7
Confidence
Low
EPSS
0
Percentile
16.4%
Improper input validation in ThemeCenter prior to SMR Sep-2024 Release 1 allows physical attackers to install privileged applications.
Affected configurations
Node
samsungandroidMatch12.0-
ORsamsungandroidMatch12.0smr-apr-2022-r1
ORsamsungandroidMatch12.0smr-apr-2023-r1
ORsamsungandroidMatch12.0smr-apr-2024-r1
ORsamsungandroidMatch12.0smr-aug-2022-r1
ORsamsungandroidMatch12.0smr-aug-2023-r1
ORsamsungandroidMatch12.0smr-aug-2024-r1
ORsamsungandroidMatch12.0smr-dec-2021-r1
ORsamsungandroidMatch12.0smr-dec-2022-r1
ORsamsungandroidMatch12.0smr-dec-2023-r1
ORsamsungandroidMatch12.0smr-feb-2022-r1
ORsamsungandroidMatch12.0smr-feb-2023-r1
ORsamsungandroidMatch12.0smr-feb-2024-r1
ORsamsungandroidMatch12.0smr-jan-2022-r1
ORsamsungandroidMatch12.0smr-jan-2023-r1
ORsamsungandroidMatch12.0smr-jan-2024-r1
ORsamsungandroidMatch12.0smr-jul-2022-r1
ORsamsungandroidMatch12.0smr-jul-2023-r1
ORsamsungandroidMatch12.0smr-jul-2024-r1
ORsamsungandroidMatch12.0smr-jun-2022-r1
ORsamsungandroidMatch12.0smr-jun-2023-r1
ORsamsungandroidMatch12.0smr-jun-2024-r1
ORsamsungandroidMatch12.0smr-mar-2022-r1
ORsamsungandroidMatch12.0smr-mar-2023-r1
ORsamsungandroidMatch12.0smr-mar-2024-r1
ORsamsungandroidMatch12.0smr-may-2022-r1
ORsamsungandroidMatch12.0smr-may-2023-r1
ORsamsungandroidMatch12.0smr-may-2024-r1
ORsamsungandroidMatch12.0smr-nov-2021-r1
ORsamsungandroidMatch12.0smr-nov-2022-r1
ORsamsungandroidMatch12.0smr-nov-2023-r1
ORsamsungandroidMatch12.0smr-oct-2022-r1
ORsamsungandroidMatch12.0smr-oct-2023-r1
ORsamsungandroidMatch12.0smr-sep-2022-r1
ORsamsungandroidMatch12.0smr-sep-2023-r1
ORsamsungandroidMatch13.0-
ORsamsungandroidMatch13.0smr-apr-2022-r1
ORsamsungandroidMatch13.0smr-apr-2023-r1
ORsamsungandroidMatch13.0smr-apr-2024-r1
ORsamsungandroidMatch13.0smr-aug-2022-r1
ORsamsungandroidMatch13.0smr-aug-2023-r1
ORsamsungandroidMatch13.0smr-aug-2024-r1
ORsamsungandroidMatch13.0smr-dec-2021-r1
ORsamsungandroidMatch13.0smr-dec-2022-r1
ORsamsungandroidMatch13.0smr-dec-2023-r1
ORsamsungandroidMatch13.0smr-feb-2022-r1
ORsamsungandroidMatch13.0smr-feb-2023-r1
ORsamsungandroidMatch13.0smr-feb-2024-r1
ORsamsungandroidMatch13.0smr-jan-2022-r1
ORsamsungandroidMatch13.0smr-jan-2023-r1
ORsamsungandroidMatch13.0smr-jan-2024-r1
ORsamsungandroidMatch13.0smr-jul-2022-r1
ORsamsungandroidMatch13.0smr-jul-2023-r1
ORsamsungandroidMatch13.0smr-jul-2024-r1
ORsamsungandroidMatch13.0smr-jun-2022-r1
ORsamsungandroidMatch13.0smr-jun-2023-r1
ORsamsungandroidMatch13.0smr-jun-2024-r1
ORsamsungandroidMatch13.0smr-mar-2022-r1
ORsamsungandroidMatch13.0smr-mar-2023-r1
ORsamsungandroidMatch13.0smr-mar-2024-r1
ORsamsungandroidMatch13.0smr-may-2022-r1
ORsamsungandroidMatch13.0smr-may-2023-r1
ORsamsungandroidMatch13.0smr-may-2024-r1
ORsamsungandroidMatch13.0smr-nov-2021-r1
ORsamsungandroidMatch13.0smr-nov-2022-r1
ORsamsungandroidMatch13.0smr-nov-2023-r1
ORsamsungandroidMatch13.0smr-oct-2022-r1
ORsamsungandroidMatch13.0smr-oct-2023-r1
ORsamsungandroidMatch13.0smr-sep-2022-r1
ORsamsungandroidMatch13.0smr-sep-2023-r1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| samsung | android | 12.0 | cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:* |
| samsung | android | 12.0 | cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:* |
| samsung | android | 12.0 | cpe:2.3:o:samsung:android:12.0:smr-apr-2023-r1:*:*:*:*:*:* |
| samsung | android | 12.0 | cpe:2.3:o:samsung:android:12.0:smr-apr-2024-r1:*:*:*:*:*:* |
| samsung | android | 12.0 | cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:* |
| samsung | android | 12.0 | cpe:2.3:o:samsung:android:12.0:smr-aug-2023-r1:*:*:*:*:*:* |
| samsung | android | 12.0 | cpe:2.3:o:samsung:android:12.0:smr-aug-2024-r1:*:*:*:*:*:* |
| samsung | android | 12.0 | cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:* |
| samsung | android | 12.0 | cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:* |
| samsung | android | 12.0 | cpe:2.3:o:samsung:android:12.0:smr-dec-2023-r1:*:*:*:*:*:* |
CNA Affected
[
{
"vendor": "Samsung Mobile",
"product": "Samsung Mobile Devices",
"versions": [
{
"status": "unaffected",
"version": "SMR Sep-2024 Release in Android 12, 13"
}
],
"defaultStatus": "affected"
}
]Related
cvelist
cvelist
CVE-2024-34645
2024-09-04 05:32:28
vulnrichment
vulnrichment
CVE-2024-34645
2024-09-04 05:32:28
nvd
nvd
CVE-2024-34645
2024-09-04 06:15:13
CVSS3
6.1
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
AI Score
6.7
Confidence
Low
EPSS
0
Percentile
16.4%
Related for CVE-2024-34645