CVE-2024-34639

Improper handling of exceptional conditions in Setupwizard prior to SMR Aug-2024 Release 1 allows physical attackers to bypass proper validation...

CVE-2024-34653

Path Traversal in My Files prior to SMR Sep-2024 Release 1 allows physical attackers to access directories with My Files' privilege...

CVE-2024-34649

Improper access control in new Dex Mode in multitasking framework prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily access an unlocked screen...

CVE-2024-34649

CVE-2024-34649 describes an improper access control flaw in the Dex Mode of Samsung’s multitasking framework, before SMR Sep-2024 Release 1. The issue could allow a physical attacker to temporarily access an unlocked screen. Affected context is limited to Samsung Mobile devices with the Dex Mode/...

CVE-2024-34649

Improper access control in new Dex Mode in multitasking framework prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily access an unlocked screen...

CVE-2024-34645

The CVE-2024-34645 issue is confirmed in ThemeCenter prior to the SMR Sep-2024 Release 1. It stems from improper input validation, enabling a physical attacker to install privileged applications. Evidence across connected docs (PT-2024-26064, Red Hat/NVD/NEWS references) identifies ThemeCenter as...

CVE-2024-34645

Improper input validation in ThemeCenter prior to SMR Sep-2024 Release 1 allows physical attackers to install privileged applications...

CVE-2024-34645

Improper input validation in ThemeCenter prior to SMR Sep-2024 Release 1 allows physical attackers to install privileged applications...

CVE-2024-34642

CVE-2024-34642 involves improper authorization in Samsung One UI Home before SMR Sep-2024 Release 1. The issue allows physical attackers to temporarily access sensitive information by leveraging insufficient access control in the affected One UI Home component. Affected software is One UI Home (p...

CVE-2024-34642

Improper authorization in One UI Home prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily access sensitive information...

CVE-2024-34639

Improper handling of exceptional conditions in Setupwizard prior to SMR Aug-2024 Release 1 allows physical attackers to bypass proper validation...

CVE-2024-34639

Improper handling of exceptional conditions in Setupwizard prior to SMR Aug-2024 Release 1 allows physical attackers to bypass proper validation...

CVE-2024-34639

The CVE-2024-34639 issue affects Samsung mobile devices’ Setupwizard component prior to SMR Aug-2024 Release 1. Root cause: improper handling of exceptional conditions, enabling a physical attacker to bypass validation. Impact (per sources): integrity could be affected by bypassing validation; ex...

CVE-2024-45678

Yubico YubiKey 5 Series devices with firmware before 5.7.0 and YubiHSM 2 devices with firmware before 2.4.0 allow an ECDSA secret-key extraction attack that requires physical access and expensive equipment in which an electromagnetic side channel is present because of a non-constant-time modular...

PT-2024-26057 · Unknown · Setupwizard

Name of the Vulnerable Software and Affected Versions: Setupwizard versions prior to SMR Aug-2024 Release 1 Description: The issue arises from improper handling of exceptional conditions, allowing physical attackers to bypass proper validation. This can be exploited by physical attackers...

PT-2024-26061 · Samsung · One Ui Home

Name of the Vulnerable Software and Affected Versions: One UI Home versions prior to SMR Sep-2024 Release 1 Description: The issue is related to improper authorization, allowing physical attackers to temporarily access sensitive information. This can be exploited by physical attackers...

PT-2024-26064 · Unknown · Themecenter

Name of the Vulnerable Software and Affected Versions: ThemeCenter versions prior to SMR Sep-2024 Release 1 Description: The issue is related to improper input validation in ThemeCenter, which allows physical attackers to install privileged applications. Recommendations: For versions prior to SMR...

CVE-2024-45678

Yubico YubiKey 5 Series devices with firmware before 5.7.0 and YubiHSM 2 devices with firmware before 2.4.0 allow an ECDSA secret-key extraction attack that requires physical access and expensive equipment in which an electromagnetic side channel is present because of a non-constant-time modular...

Yubico YubiKey 5 安全漏洞

Yubico YubiKey 5 is a multi-protocol secure secret key device from Yubico. A security vulnerability exists in Yubico YubiKey 5 versions prior to 5.7.0 and YubiHSM 2 versions prior to 2.4.0, which stems from an electromagnetic side channel due to a non-constant time modulo inversion in the Extende...

Siemens LOGO! V8.3 BM Devices Plaintext Storage of a Password (CVE-2024-39922)

LOGO! V8.3 BM incl. SIPLUS variants devices contain a plaintext storage of a password vulnerability. This could allow an attacker with phyiscal access to an affected device to extract user-set passwords from an embedded storage IC. Siemens has released new hardware versions with the LOGO! V8.4 BM...