Lucene search

SamsungMobileCVELIST:CVE-2024-34659

HistorySep 04, 2024 - 5:32 a.m.

CVE-2024-34659

2024-09-0405:32:45

SamsungMobile

www.cve.org

sensitive information

groupsharing

remote attacks

version 13.6.13.3

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

16.8%

JSON

Exposure of sensitive information in GroupSharing prior to version 13.6.13.3 allows remote attackers can force the victim to join the group.

CNA Affected

[
  {
    "vendor": "Samsung Mobile",
    "product": "Group Sharing",
    "versions": [
      {
        "status": "unaffected",
        "version": "13.6.13.3"
      }
    ],
    "defaultStatus": "affected"
  }
]

References

security.samsungmobile.com/serviceWeb.smsb?year=2024&month=09

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

16.8%

JSON

Related for CVELIST:CVE-2024-34659