Lucene search

K
nvd[email protected]NVD:CVE-2024-34617
HistoryAug 07, 2024 - 2:15 a.m.

CVE-2024-34617

2024-08-0702:15:37
CWE-276
web.nvd.nist.gov
2
improper handling
telephony
local attackers
default message application

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS

0

Percentile

9.5%

Improper handling of insufficient permission in Telephony prior to SMR Aug-2024 Release 1 allows local attackers to configure default Message application.

Affected configurations

Nvd
Node
samsungandroidMatch14.0-
OR
samsungandroidMatch14.0smr-apr-2022-r1
OR
samsungandroidMatch14.0smr-apr-2023-r1
OR
samsungandroidMatch14.0smr-apr-2024-r1
OR
samsungandroidMatch14.0smr-aug-2022-r1
OR
samsungandroidMatch14.0smr-aug-2023-r1
OR
samsungandroidMatch14.0smr-dec-2021-r1
OR
samsungandroidMatch14.0smr-dec-2022-r1
OR
samsungandroidMatch14.0smr-dec-2023-r1
OR
samsungandroidMatch14.0smr-feb-2022-r1
OR
samsungandroidMatch14.0smr-feb-2023-r1
OR
samsungandroidMatch14.0smr-feb-2024-r1
OR
samsungandroidMatch14.0smr-jan-2022-r1
OR
samsungandroidMatch14.0smr-jan-2023-r1
OR
samsungandroidMatch14.0smr-jan-2024-r1
OR
samsungandroidMatch14.0smr-jul-2022-r1
OR
samsungandroidMatch14.0smr-jul-2023-r1
OR
samsungandroidMatch14.0smr-jul-2024-r1
OR
samsungandroidMatch14.0smr-jun-2022-r1
OR
samsungandroidMatch14.0smr-jun-2023-r1
OR
samsungandroidMatch14.0smr-jun-2024-r1
OR
samsungandroidMatch14.0smr-mar-2022-r1
OR
samsungandroidMatch14.0smr-mar-2023-r1
OR
samsungandroidMatch14.0smr-mar-2024-r1
OR
samsungandroidMatch14.0smr-may-2022-r1
OR
samsungandroidMatch14.0smr-may-2023-r1
OR
samsungandroidMatch14.0smr-may-2024-r1
OR
samsungandroidMatch14.0smr-nov-2021-r1
OR
samsungandroidMatch14.0smr-nov-2022-r1
OR
samsungandroidMatch14.0smr-nov-2023-r1
OR
samsungandroidMatch14.0smr-oct-2022-r1
OR
samsungandroidMatch14.0smr-oct-2023-r1
OR
samsungandroidMatch14.0smr-sep-2022-r1
OR
samsungandroidMatch14.0smr-sep-2023-r1
VendorProductVersionCPE
samsungandroid14.0cpe:2.3:o:samsung:android:14.0:-:*:*:*:*:*:*
samsungandroid14.0cpe:2.3:o:samsung:android:14.0:smr-apr-2022-r1:*:*:*:*:*:*
samsungandroid14.0cpe:2.3:o:samsung:android:14.0:smr-apr-2023-r1:*:*:*:*:*:*
samsungandroid14.0cpe:2.3:o:samsung:android:14.0:smr-apr-2024-r1:*:*:*:*:*:*
samsungandroid14.0cpe:2.3:o:samsung:android:14.0:smr-aug-2022-r1:*:*:*:*:*:*
samsungandroid14.0cpe:2.3:o:samsung:android:14.0:smr-aug-2023-r1:*:*:*:*:*:*
samsungandroid14.0cpe:2.3:o:samsung:android:14.0:smr-dec-2021-r1:*:*:*:*:*:*
samsungandroid14.0cpe:2.3:o:samsung:android:14.0:smr-dec-2022-r1:*:*:*:*:*:*
samsungandroid14.0cpe:2.3:o:samsung:android:14.0:smr-dec-2023-r1:*:*:*:*:*:*
samsungandroid14.0cpe:2.3:o:samsung:android:14.0:smr-feb-2022-r1:*:*:*:*:*:*
Rows per page:
1-10 of 341

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS

0

Percentile

9.5%

Related for NVD:CVE-2024-34617