Lucene search

K
nvd[email protected]NVD:CVE-2024-34608
HistoryAug 07, 2024 - 2:15 a.m.

CVE-2024-34608

2024-08-0702:15:35
web.nvd.nist.gov
4
access control
paymentmanagerservice
service restrictions

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS

0

Percentile

9.5%

Improper access control in PaymentManagerService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background.

Affected configurations

Nvd
Node
samsungandroidMatch12.0-
OR
samsungandroidMatch12.0smr-apr-2022-r1
OR
samsungandroidMatch12.0smr-apr-2023-r1
OR
samsungandroidMatch12.0smr-apr-2024-r1
OR
samsungandroidMatch12.0smr-aug-2022-r1
OR
samsungandroidMatch12.0smr-aug-2023-r1
OR
samsungandroidMatch12.0smr-dec-2021-r1
OR
samsungandroidMatch12.0smr-dec-2022-r1
OR
samsungandroidMatch12.0smr-dec-2023-r1
OR
samsungandroidMatch12.0smr-feb-2022-r1
OR
samsungandroidMatch12.0smr-feb-2023-r1
OR
samsungandroidMatch12.0smr-feb-2024-r1
OR
samsungandroidMatch12.0smr-jan-2022-r1
OR
samsungandroidMatch12.0smr-jan-2023-r1
OR
samsungandroidMatch12.0smr-jan-2024-r1
OR
samsungandroidMatch12.0smr-jul-2022-r1
OR
samsungandroidMatch12.0smr-jul-2023-r1
OR
samsungandroidMatch12.0smr-jul-2024-r1
OR
samsungandroidMatch12.0smr-jun-2022-r1
OR
samsungandroidMatch12.0smr-jun-2023-r1
OR
samsungandroidMatch12.0smr-jun-2024-r1
OR
samsungandroidMatch12.0smr-mar-2022-r1
OR
samsungandroidMatch12.0smr-mar-2023-r1
OR
samsungandroidMatch12.0smr-mar-2024-r1
OR
samsungandroidMatch12.0smr-may-2022-r1
OR
samsungandroidMatch12.0smr-may-2023-r1
OR
samsungandroidMatch12.0smr-may-2024-r1
OR
samsungandroidMatch12.0smr-nov-2021-r1
OR
samsungandroidMatch12.0smr-nov-2022-r1
OR
samsungandroidMatch12.0smr-nov-2023-r1
OR
samsungandroidMatch12.0smr-oct-2022-r1
OR
samsungandroidMatch12.0smr-oct-2023-r1
OR
samsungandroidMatch12.0smr-sep-2022-r1
OR
samsungandroidMatch12.0smr-sep-2023-r1
OR
samsungandroidMatch13.0-
OR
samsungandroidMatch13.0smr-apr-2022-r1
OR
samsungandroidMatch13.0smr-apr-2023-r1
OR
samsungandroidMatch13.0smr-apr-2024-r1
OR
samsungandroidMatch13.0smr-aug-2022-r1
OR
samsungandroidMatch13.0smr-aug-2023-r1
OR
samsungandroidMatch13.0smr-dec-2021-r1
OR
samsungandroidMatch13.0smr-dec-2022-r1
OR
samsungandroidMatch13.0smr-dec-2023-r1
OR
samsungandroidMatch13.0smr-feb-2022-r1
OR
samsungandroidMatch13.0smr-feb-2023-r1
OR
samsungandroidMatch13.0smr-feb-2024-r1
OR
samsungandroidMatch13.0smr-jan-2022-r1
OR
samsungandroidMatch13.0smr-jan-2023-r1
OR
samsungandroidMatch13.0smr-jan-2024-r1
OR
samsungandroidMatch13.0smr-jul-2022-r1
OR
samsungandroidMatch13.0smr-jul-2023-r1
OR
samsungandroidMatch13.0smr-jul-2024-r1
OR
samsungandroidMatch13.0smr-jun-2022-r1
OR
samsungandroidMatch13.0smr-jun-2023-r1
OR
samsungandroidMatch13.0smr-jun-2024-r1
OR
samsungandroidMatch13.0smr-mar-2022-r1
OR
samsungandroidMatch13.0smr-mar-2023-r1
OR
samsungandroidMatch13.0smr-mar-2024-r1
OR
samsungandroidMatch13.0smr-may-2022-r1
OR
samsungandroidMatch13.0smr-may-2023-r1
OR
samsungandroidMatch13.0smr-may-2024-r1
OR
samsungandroidMatch13.0smr-nov-2021-r1
OR
samsungandroidMatch13.0smr-nov-2022-r1
OR
samsungandroidMatch13.0smr-nov-2023-r1
OR
samsungandroidMatch13.0smr-oct-2022-r1
OR
samsungandroidMatch13.0smr-oct-2023-r1
OR
samsungandroidMatch13.0smr-sep-2022-r1
OR
samsungandroidMatch13.0smr-sep-2023-r1
OR
samsungandroidMatch14.0-
OR
samsungandroidMatch14.0smr-apr-2022-r1
OR
samsungandroidMatch14.0smr-apr-2023-r1
OR
samsungandroidMatch14.0smr-apr-2024-r1
OR
samsungandroidMatch14.0smr-aug-2022-r1
OR
samsungandroidMatch14.0smr-aug-2023-r1
OR
samsungandroidMatch14.0smr-dec-2021-r1
OR
samsungandroidMatch14.0smr-dec-2022-r1
OR
samsungandroidMatch14.0smr-dec-2023-r1
OR
samsungandroidMatch14.0smr-feb-2022-r1
OR
samsungandroidMatch14.0smr-feb-2023-r1
OR
samsungandroidMatch14.0smr-feb-2024-r1
OR
samsungandroidMatch14.0smr-jan-2022-r1
OR
samsungandroidMatch14.0smr-jan-2023-r1
OR
samsungandroidMatch14.0smr-jan-2024-r1
OR
samsungandroidMatch14.0smr-jul-2022-r1
OR
samsungandroidMatch14.0smr-jul-2023-r1
OR
samsungandroidMatch14.0smr-jul-2024-r1
OR
samsungandroidMatch14.0smr-jun-2022-r1
OR
samsungandroidMatch14.0smr-jun-2023-r1
OR
samsungandroidMatch14.0smr-jun-2024-r1
OR
samsungandroidMatch14.0smr-mar-2022-r1
OR
samsungandroidMatch14.0smr-mar-2023-r1
OR
samsungandroidMatch14.0smr-mar-2024-r1
OR
samsungandroidMatch14.0smr-may-2022-r1
OR
samsungandroidMatch14.0smr-may-2023-r1
OR
samsungandroidMatch14.0smr-may-2024-r1
OR
samsungandroidMatch14.0smr-nov-2021-r1
OR
samsungandroidMatch14.0smr-nov-2022-r1
OR
samsungandroidMatch14.0smr-nov-2023-r1
OR
samsungandroidMatch14.0smr-oct-2022-r1
OR
samsungandroidMatch14.0smr-oct-2023-r1
OR
samsungandroidMatch14.0smr-sep-2022-r1
OR
samsungandroidMatch14.0smr-sep-2023-r1
VendorProductVersionCPE
samsungandroid12.0cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:*
samsungandroid12.0cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*
samsungandroid12.0cpe:2.3:o:samsung:android:12.0:smr-apr-2023-r1:*:*:*:*:*:*
samsungandroid12.0cpe:2.3:o:samsung:android:12.0:smr-apr-2024-r1:*:*:*:*:*:*
samsungandroid12.0cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*
samsungandroid12.0cpe:2.3:o:samsung:android:12.0:smr-aug-2023-r1:*:*:*:*:*:*
samsungandroid12.0cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*
samsungandroid12.0cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*
samsungandroid12.0cpe:2.3:o:samsung:android:12.0:smr-dec-2023-r1:*:*:*:*:*:*
samsungandroid12.0cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*
Rows per page:
1-10 of 1021

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS

0

Percentile

9.5%

Related for NVD:CVE-2024-34608