CVE-2024-34674
Nov. 12, 2024, 4:08 p.m.
Tags
CVSS Score
Products Impacted
| Vendor | Product | Versions |
|---|---|---|
| samsung |
|
|
Description
Improper access control in Contacts prior to SMR Nov-2024 Release 1 allows physical attackers to access data across multiple user profiles.
Weaknesses
Date
Published: Nov. 6, 2024, 3:15 a.m.
Last Modified: Nov. 12, 2024, 4:08 p.m.
Status : Analyzed
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
mobile.security@samsung.com
CPEs
| Type | Vendor | Product | Version | Update | Edition | Language | Software Edition | Target Software | Target Hardware | Other Information |
|---|---|---|---|---|---|---|---|---|---|---|
| o | samsung | android | 12.0 | - | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-apr-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-apr-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-apr-2024-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-aug-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-aug-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-aug-2024-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-dec-2021-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-dec-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-dec-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-feb-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-feb-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-feb-2024-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-jan-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-jan-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-jan-2024-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-jul-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-jul-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-jul-2024-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-jun-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-jun-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-jun-2024-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-mar-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-mar-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-mar-2024-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-may-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-may-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-may-2024-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-nov-2021-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-nov-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-nov-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-oct-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-oct-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-oct-2024-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-sep-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr-sep-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 12.0 | smr_sep-2024-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | - | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-apr-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-apr-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-apr-2024-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-aug-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-aug-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-aug-2024-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-dec-2021-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-dec-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-dec-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-feb-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-feb-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-feb-2024-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-jan-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-jan-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-jan-2024-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-jul-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-jul-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-jul-2024-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-jun-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-jun-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-jun-2024-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-mar-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-mar-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-mar-2024-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-may-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-may-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-may-2024-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-nov-2021-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-nov-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-nov-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-oct-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-oct-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-oct-2024-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-sep-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-sep-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 13.0 | smr-sep-2024-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | - | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-apr-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-apr-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-apr-2024-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-aug-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-aug-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-aug-2024-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-dec-2021-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-dec-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-dec-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-feb-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-feb-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-feb-2024-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-jan-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-jan-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-jan-2024-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-jul-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-jul-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-jul-2024-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-jun-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-jun-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-jun-2024-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-mar-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-mar-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-mar-2024-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-may-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-may-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-may-2024-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-nov-2021-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-nov-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-nov-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-oct-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-oct-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-oct-2024-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-sep-2022-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-sep-2023-r1 | / | / | / | / | / | / |
| o | samsung | android | 14.0 | smr-sep-2024-r1 | / | / | / | / | / | / |
CVSS Data
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
Base Score
Exploitability Score
Impact Score
Base Severity
MEDIUMCVSS Vector String
The CVSS vector string provides an in-depth view of the vulnerability metrics.
View Vector StringCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References
https://security.samsungmobile.com/
mobile.security@samsung.com