nvd-json-data-feeds/CVE-2024/CVE-2024-494xx/CVE-2024-49421.json

{
  "id": "CVE-2024-49421",
  "sourceIdentifier": "mobile.security@samsung.com",
  "published": "2024-12-03T06:15:10.393",
  "lastModified": "2024-12-03T06:15:10.393",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Path traversal in Quick Share Agent prior to version 3.5.14.47 in Android 12, 3.5.19.41 in Android 13, and 3.5.19.42 in Android 14 allows adjacent attackers to write file in arbitrary location."
    },
    {
      "lang": "es",
      "value": " El path traversal en Quick Share Agent anterior a la versi\u00f3n 3.5.14.47 en Android 12, 3.5.19.41 en Android 13 y 3.5.19.42 en Android 14 permite a atacantes adyacentes escribir archivos en una ubicaci\u00f3n arbitraria."
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "mobile.security@samsung.com",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
          "baseScore": 4.3,
          "baseSeverity": "MEDIUM",
          "attackVector": "ADJACENT_NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "LOW",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 1.4
      }
    ]
  },
  "references": [
    {
      "url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=12",
      "source": "mobile.security@samsung.com"
    }
  ]
}