Lucene search
SamsungMobileCVE-2024-34648HistorySep 04, 2024 - 6:15 a.m.
CVE-2024-34648
2024-09-0406:15:14
CWE-276
SamsungMobile
web.nvd.nist.gov
24
improper handling
permissions
knoxmiscpolicy
smr sep-2024
sensitive data access
local attackers
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
6.7
Confidence
Low
EPSS
0
Percentile
9.6%
Improper Handling of Insufficient Permissions in KnoxMiscPolicy prior to SMR Sep-2024 Release 1 allows local attackers to access sensitive data.
Affected configurations
Node
samsungandroidMatch12.0-
ORsamsungandroidMatch12.0smr-apr-2022-r1
ORsamsungandroidMatch12.0smr-apr-2023-r1
ORsamsungandroidMatch12.0smr-apr-2024-r1
ORsamsungandroidMatch12.0smr-aug-2022-r1
ORsamsungandroidMatch12.0smr-aug-2023-r1
ORsamsungandroidMatch12.0smr-aug-2024-r1
ORsamsungandroidMatch12.0smr-dec-2021-r1
ORsamsungandroidMatch12.0smr-dec-2022-r1
ORsamsungandroidMatch12.0smr-dec-2023-r1
ORsamsungandroidMatch12.0smr-feb-2022-r1
ORsamsungandroidMatch12.0smr-feb-2023-r1
ORsamsungandroidMatch12.0smr-feb-2024-r1
ORsamsungandroidMatch12.0smr-jan-2022-r1
ORsamsungandroidMatch12.0smr-jan-2023-r1
ORsamsungandroidMatch12.0smr-jan-2024-r1
ORsamsungandroidMatch12.0smr-jul-2022-r1
ORsamsungandroidMatch12.0smr-jul-2023-r1
ORsamsungandroidMatch12.0smr-jul-2024-r1
ORsamsungandroidMatch12.0smr-jun-2022-r1
ORsamsungandroidMatch12.0smr-jun-2023-r1
ORsamsungandroidMatch12.0smr-jun-2024-r1
ORsamsungandroidMatch12.0smr-mar-2022-r1
ORsamsungandroidMatch12.0smr-mar-2023-r1
ORsamsungandroidMatch12.0smr-mar-2024-r1
ORsamsungandroidMatch12.0smr-may-2022-r1
ORsamsungandroidMatch12.0smr-may-2023-r1
ORsamsungandroidMatch12.0smr-may-2024-r1
ORsamsungandroidMatch12.0smr-nov-2021-r1
ORsamsungandroidMatch12.0smr-nov-2022-r1
ORsamsungandroidMatch12.0smr-nov-2023-r1
ORsamsungandroidMatch12.0smr-oct-2022-r1
ORsamsungandroidMatch12.0smr-oct-2023-r1
ORsamsungandroidMatch12.0smr-sep-2022-r1
ORsamsungandroidMatch12.0smr-sep-2023-r1
ORsamsungandroidMatch13.0-
ORsamsungandroidMatch13.0smr-apr-2022-r1
ORsamsungandroidMatch13.0smr-apr-2023-r1
ORsamsungandroidMatch13.0smr-apr-2024-r1
ORsamsungandroidMatch13.0smr-aug-2022-r1
ORsamsungandroidMatch13.0smr-aug-2023-r1
ORsamsungandroidMatch13.0smr-aug-2024-r1
ORsamsungandroidMatch13.0smr-dec-2021-r1
ORsamsungandroidMatch13.0smr-dec-2022-r1
ORsamsungandroidMatch13.0smr-dec-2023-r1
ORsamsungandroidMatch13.0smr-feb-2022-r1
ORsamsungandroidMatch13.0smr-feb-2023-r1
ORsamsungandroidMatch13.0smr-feb-2024-r1
ORsamsungandroidMatch13.0smr-jan-2022-r1
ORsamsungandroidMatch13.0smr-jan-2023-r1
ORsamsungandroidMatch13.0smr-jan-2024-r1
ORsamsungandroidMatch13.0smr-jul-2022-r1
ORsamsungandroidMatch13.0smr-jul-2023-r1
ORsamsungandroidMatch13.0smr-jul-2024-r1
ORsamsungandroidMatch13.0smr-jun-2022-r1
ORsamsungandroidMatch13.0smr-jun-2023-r1
ORsamsungandroidMatch13.0smr-jun-2024-r1
ORsamsungandroidMatch13.0smr-mar-2022-r1
ORsamsungandroidMatch13.0smr-mar-2023-r1
ORsamsungandroidMatch13.0smr-mar-2024-r1
ORsamsungandroidMatch13.0smr-may-2022-r1
ORsamsungandroidMatch13.0smr-may-2023-r1
ORsamsungandroidMatch13.0smr-may-2024-r1
ORsamsungandroidMatch13.0smr-nov-2021-r1
ORsamsungandroidMatch13.0smr-nov-2022-r1
ORsamsungandroidMatch13.0smr-nov-2023-r1
ORsamsungandroidMatch13.0smr-oct-2022-r1
ORsamsungandroidMatch13.0smr-oct-2023-r1
ORsamsungandroidMatch13.0smr-sep-2022-r1
ORsamsungandroidMatch13.0smr-sep-2023-r1
ORsamsungandroidMatch14.0-
ORsamsungandroidMatch14.0smr-apr-2022-r1
ORsamsungandroidMatch14.0smr-apr-2023-r1
ORsamsungandroidMatch14.0smr-apr-2024-r1
ORsamsungandroidMatch14.0smr-aug-2022-r1
ORsamsungandroidMatch14.0smr-aug-2023-r1
ORsamsungandroidMatch14.0smr-aug-2024-r1
ORsamsungandroidMatch14.0smr-dec-2021-r1
ORsamsungandroidMatch14.0smr-dec-2022-r1
ORsamsungandroidMatch14.0smr-dec-2023-r1
ORsamsungandroidMatch14.0smr-feb-2022-r1
ORsamsungandroidMatch14.0smr-feb-2023-r1
ORsamsungandroidMatch14.0smr-feb-2024-r1
ORsamsungandroidMatch14.0smr-jan-2022-r1
ORsamsungandroidMatch14.0smr-jan-2023-r1
ORsamsungandroidMatch14.0smr-jan-2024-r1
ORsamsungandroidMatch14.0smr-jul-2022-r1
ORsamsungandroidMatch14.0smr-jul-2023-r1
ORsamsungandroidMatch14.0smr-jul-2024-r1
ORsamsungandroidMatch14.0smr-jun-2022-r1
ORsamsungandroidMatch14.0smr-jun-2023-r1
ORsamsungandroidMatch14.0smr-jun-2024-r1
ORsamsungandroidMatch14.0smr-mar-2022-r1
ORsamsungandroidMatch14.0smr-mar-2023-r1
ORsamsungandroidMatch14.0smr-mar-2024-r1
ORsamsungandroidMatch14.0smr-may-2022-r1
ORsamsungandroidMatch14.0smr-may-2023-r1
ORsamsungandroidMatch14.0smr-may-2024-r1
ORsamsungandroidMatch14.0smr-nov-2021-r1
ORsamsungandroidMatch14.0smr-nov-2022-r1
ORsamsungandroidMatch14.0smr-nov-2023-r1
ORsamsungandroidMatch14.0smr-oct-2022-r1
ORsamsungandroidMatch14.0smr-oct-2023-r1
ORsamsungandroidMatch14.0smr-sep-2022-r1
ORsamsungandroidMatch14.0smr-sep-2023-r1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| samsung | android | 12.0 | cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:* |
| samsung | android | 12.0 | cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:* |
| samsung | android | 12.0 | cpe:2.3:o:samsung:android:12.0:smr-apr-2023-r1:*:*:*:*:*:* |
| samsung | android | 12.0 | cpe:2.3:o:samsung:android:12.0:smr-apr-2024-r1:*:*:*:*:*:* |
| samsung | android | 12.0 | cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:* |
| samsung | android | 12.0 | cpe:2.3:o:samsung:android:12.0:smr-aug-2023-r1:*:*:*:*:*:* |
| samsung | android | 12.0 | cpe:2.3:o:samsung:android:12.0:smr-aug-2024-r1:*:*:*:*:*:* |
| samsung | android | 12.0 | cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:* |
| samsung | android | 12.0 | cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:* |
| samsung | android | 12.0 | cpe:2.3:o:samsung:android:12.0:smr-dec-2023-r1:*:*:*:*:*:* |
CNA Affected
[
{
"vendor": "Samsung Mobile",
"product": "Samsung Mobile Devices",
"versions": [
{
"status": "unaffected",
"version": "SMR Sep-2024 Release in Android 12, 13, 14"
}
],
"defaultStatus": "affected"
}
]Related
cvelist
cvelist
CVE-2024-34648
2024-09-04 05:32:32
nvd
nvd
CVE-2024-34648
2024-09-04 06:15:14
vulnrichment
vulnrichment
CVE-2024-34648
2024-09-04 05:32:32
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
6.7
Confidence
Low
EPSS
0
Percentile
9.6%
Related for CVE-2024-34648