mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-29 01:31:20 +00:00
48 lines
1.7 KiB
JSON
48 lines
1.7 KiB
JSON
{
|
|
"id": "CVE-2024-20840",
|
|
"sourceIdentifier": "mobile.security@samsung.com",
|
|
"published": "2024-03-05T05:15:12.363",
|
|
"lastModified": "2024-03-05T13:41:01.900",
|
|
"vulnStatus": "Awaiting Analysis",
|
|
"cveTags": [],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "Improper access control in Samsung Voice Recorder prior to versions 21.5.16.01 in Android 12 and Android 13, 21.4.51.02 in Android 14 allows physical attackers using hardware keyboard to use VoiceRecorder on the lock screen."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "El control de acceso inadecuado en Samsung Voice Recorder anterior a las versiones 21.5.16.01 en Android 12 y Android 13, 21.4.51.02 en Android 14 permite a atacantes f\u00edsicos que usan un teclado de hardware usar VoiceRecorder en la pantalla de bloqueo."
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV31": [
|
|
{
|
|
"source": "mobile.security@samsung.com",
|
|
"type": "Secondary",
|
|
"cvssData": {
|
|
"version": "3.1",
|
|
"vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
|
|
"attackVector": "PHYSICAL",
|
|
"attackComplexity": "HIGH",
|
|
"privilegesRequired": "NONE",
|
|
"userInteraction": "NONE",
|
|
"scope": "UNCHANGED",
|
|
"confidentialityImpact": "HIGH",
|
|
"integrityImpact": "NONE",
|
|
"availabilityImpact": "HIGH",
|
|
"baseScore": 5.7,
|
|
"baseSeverity": "MEDIUM"
|
|
},
|
|
"exploitabilityScore": 0.5,
|
|
"impactScore": 5.2
|
|
}
|
|
]
|
|
},
|
|
"references": [
|
|
{
|
|
"url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=03",
|
|
"source": "mobile.security@samsung.com"
|
|
}
|
|
]
|
|
} |