Lucene search

TECNOMobileCVE-2024-8039

HistorySep 14, 2024 - 4:15 a.m.

CVE-2024-8039

2024-09-1404:15:04

CWE-732

TECNOMobile

web.nvd.nist.gov

improper permission

configuration vulnerability

mobile application

account takeover

com.afmobi.boomplayer

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.9

Confidence

Low

EPSS

Percentile

9.6%

JSON

Improper permission configurationDomain configuration vulnerability of the mobile application (com.afmobi.boomplayer) can lead to account takeover risks.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "com.afmobi.boomplayer",
    "vendor": "TECNO",
    "versions": [
      {
        "status": "affected",
        "version": "7.2.12"
      }
    ]
  }
]

References

security.tecno.com/SRC/blogdetail/307?lang=en_US

security.tecno.com/SRC/securityUpdates?type=SA

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.9

Confidence

Low

EPSS

Percentile

9.6%

JSON

Related for CVE-2024-8039