Lucene search

SamsungMobileCVE-2024-34659

HistorySep 04, 2024 - 6:15 a.m.

CVE-2024-34659

2024-09-0406:15:16

SamsungMobile

web.nvd.nist.gov

information exposure

groupsharing

remote attackers.

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

16.8%

JSON

Exposure of sensitive information in GroupSharing prior to version 13.6.13.3 allows remote attackers can force the victim to join the group.

Affected configurations

Nvd

Node

samsunggroup_sharingRange<13.6.13.3android

VendorProductVersionCPE
samsunggroup_sharing*cpe:2.3:a:samsung:group_sharing:*:*:*:*:*:android:*:*

Vendor	Product	Version	CPE
samsung	group_sharing	*	cpe:2.3:a:samsung:group_sharing::::::android::*

CNA Affected

[
  {
    "vendor": "Samsung Mobile",
    "product": "Group Sharing",
    "versions": [
      {
        "status": "unaffected",
        "version": "13.6.13.3"
      }
    ],
    "defaultStatus": "affected"
  }
]

References

security.samsungmobile.com/serviceWeb.smsb?year=2024&month=09

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

16.8%

JSON

Related for CVE-2024-34659