Lucene search

K
vulnrichmentSamsungMobileVULNRICHMENT:CVE-2024-34646
HistorySep 04, 2024 - 5:32 a.m.

CVE-2024-34646

2024-09-0405:32:30
SamsungMobile
github.com
1
access control
dualdarmanagerproxy
local attackers
permanent denial of service
smr sep-2024 release 1
cve-2024-34646

CVSS3

6.6

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

AI Score

6.6

Confidence

High

EPSS

0

Percentile

9.6%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Improper access control in DualDarManagerProxy prior to SMR Sep-2024 Release 1 allows local attackers to cause local permanent denial of service.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:samsung:android:12.0:smr-sep-2024-r1:*:*:*:*:*:*"
    ],
    "vendor": "samsung",
    "product": "android",
    "versions": [
      {
        "status": "unaffected",
        "version": "12.0"
      }
    ],
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:2.3:o:samsung:android:13.0:smr-sep-2024-r1:*:*:*:*:*:*"
    ],
    "vendor": "samsung",
    "product": "android",
    "versions": [
      {
        "status": "unaffected",
        "version": "13.0"
      }
    ],
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:2.3:o:samsung:android:14.0:smr-sep-2024-r1:*:*:*:*:*:*"
    ],
    "vendor": "samsung",
    "product": "android",
    "versions": [
      {
        "status": "unaffected",
        "version": "14.0"
      }
    ],
    "defaultStatus": "affected"
  }
]

CVSS3

6.6

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

AI Score

6.6

Confidence

High

EPSS

0

Percentile

9.6%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-34646