fkie_cve-2024-49401
Vulnerability from fkie_nvd
Published
2024-11-06 03:15
Modified
2024-11-12 16:10
Severity ?
5.1 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
7.1 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
7.1 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Summary
Improper input validation in Settings Suggestions prior to SMR Nov-2024 Release 1 allows local attackers to launch privileged activities.
References
Impacted products
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:*", matchCriteriaId: "A123EDB1-3048-44B0-8D4D-39A2B24B5F6B", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-apr-2022-r1:*:*:*:*:*:*", matchCriteriaId: "BDE4D65E-8F9B-4810-AED6-95564A97D741", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*", matchCriteriaId: "70825981-F895-4BFD-9B6E-92BFF0D67023", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-apr-2024-r1:*:*:*:*:*:*", matchCriteriaId: "A5E68B7B-BA08-4E8C-B60A-B3836C6986BC", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-aug-2022-r1:*:*:*:*:*:*", matchCriteriaId: "0AF1EDA0-2712-4C3C-8D8A-89E154BB63DF", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*", matchCriteriaId: "88DC0A82-CAF3-4E88-8A4D-8AF79D0C226D", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-aug-2024-r1:*:*:*:*:*:*", matchCriteriaId: "6239D93F-CA0E-4120-96A1-FB63276EAEE8", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-dec-2021-r1:*:*:*:*:*:*", matchCriteriaId: "CD382E2D-0B51-4908-989A-88E083FC85BF", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*", matchCriteriaId: "299284DA-85AB-4162-B858-E67E5C6C14F7", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*", matchCriteriaId: "38B7AB56-AB65-4557-A91C-40CA2FD12351", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-feb-2022-r1:*:*:*:*:*:*", matchCriteriaId: "61D507C0-086B-4139-A560-126964DFA579", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*", matchCriteriaId: "D98F307E-3B01-4C17-86E5-1C6299919417", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-feb-2024-r1:*:*:*:*:*:*", matchCriteriaId: "952CA843-7CF0-4424-BDA4-3F2A93E077B6", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-jan-2022-r1:*:*:*:*:*:*", matchCriteriaId: "57B125ED-D939-4CBC-9E96-BBCF02402A69", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-jan-2023-r1:*:*:*:*:*:*", matchCriteriaId: "7D7DA96D-9C25-4DDA-A6BF-D998AC346B89", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-jan-2024-r1:*:*:*:*:*:*", matchCriteriaId: "07AC19C6-D245-4C3A-90CC-A931A901EA0A", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-jul-2022-r1:*:*:*:*:*:*", matchCriteriaId: "DF85AA7B-E1C7-4946-92B4-E4D545CAACDF", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*", matchCriteriaId: "34114DDC-DCDA-4306-8D23-2E628873171F", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-jul-2024-r1:*:*:*:*:*:*", matchCriteriaId: "B6871BC1-19F4-4F0C-88D8-4000590D8D5A", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-jun-2022-r1:*:*:*:*:*:*", matchCriteriaId: "9FA72654-2389-4709-BC70-59EC4349A826", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*", matchCriteriaId: "85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-jun-2024-r1:*:*:*:*:*:*", matchCriteriaId: "E346DCBD-7DEB-464F-B917-8624BE87D646", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-mar-2022-r1:*:*:*:*:*:*", matchCriteriaId: "79C89A24-B07F-43D2-AE83-8F4F03D6C114", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*", matchCriteriaId: "5F73D594-178F-4FC8-9F40-0E545E2647B0", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-mar-2024-r1:*:*:*:*:*:*", matchCriteriaId: "5697984D-08BA-412F-9BDF-26B658B0ADBC", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-may-2022-r1:*:*:*:*:*:*", matchCriteriaId: "E4187BA1-226E-4976-A642-2F6DAE85538E", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*", matchCriteriaId: "3F3EF3F1-4E54-46E3-A308-69656A29FBD2", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-may-2024-r1:*:*:*:*:*:*", matchCriteriaId: "73F22C26-52FC-42A7-B263-0CC7770A8C6A", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-nov-2021-r1:*:*:*:*:*:*", matchCriteriaId: "BFB2B338-5E04-4136-939F-749A3B163656", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*", matchCriteriaId: "D2B24866-2B3A-4A1A-8B75-EF7A7541797A", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*", matchCriteriaId: "3D30C02C-91FB-4D29-AF49-7903158E8FEB", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*", matchCriteriaId: "EBB29F18-A929-432B-B20C-365401E6CA12", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*", matchCriteriaId: "2B6D9064-844B-4D3F-AAE4-D170DF45EF8D", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-oct-2024-r1:*:*:*:*:*:*", matchCriteriaId: "C908A5B3-C47B-4DA1-A62F-F8FD77FF960D", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-sep-2022-r1:*:*:*:*:*:*", matchCriteriaId: "4C17A088-2CA1-4818-940F-2FEFA881D598", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*", matchCriteriaId: "C581B7EE-CD08-4D6E-8858-EA8FA631F84C", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:13.0:smr-sep-2024-r1:*:*:*:*:*:*", matchCriteriaId: "1DD187E2-2655-407D-87F9-135A9D45F783", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:-:*:*:*:*:*:*", matchCriteriaId: "3093F6FE-C562-4F62-97B7-CA0D2DDF9BBE", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-apr-2022-r1:*:*:*:*:*:*", matchCriteriaId: "9CBFF102-91A9-4BCC-BB43-912896BFCCEA", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-apr-2023-r1:*:*:*:*:*:*", matchCriteriaId: "DAB2A0D7-8F4F-4128-AE09-D2658D793BF7", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-apr-2024-r1:*:*:*:*:*:*", matchCriteriaId: "6A89AE5B-4D1A-4ADA-B572-38B1FC4ED54C", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-aug-2022-r1:*:*:*:*:*:*", matchCriteriaId: "401980A7-E64A-4773-83EB-C93B50AE0F73", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-aug-2023-r1:*:*:*:*:*:*", matchCriteriaId: "CC6E2FC7-2BAF-4C7B-9E0F-D9F844041A35", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-aug-2024-r1:*:*:*:*:*:*", matchCriteriaId: "6E12AB0B-728A-4478-B237-78CBAA2A44C5", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-dec-2021-r1:*:*:*:*:*:*", matchCriteriaId: "0501033A-0D51-41E8-91A9-E72B6EE3F78D", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-dec-2022-r1:*:*:*:*:*:*", matchCriteriaId: "2A901EFE-90BA-474C-88D2-8A3E7D99C0E7", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-dec-2023-r1:*:*:*:*:*:*", matchCriteriaId: "DF7B3213-520A-49F0-A183-C73A37A56854", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-feb-2022-r1:*:*:*:*:*:*", matchCriteriaId: "30F706F3-34F6-4D43-AE5E-C202C700A333", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-feb-2023-r1:*:*:*:*:*:*", matchCriteriaId: "FD8B9CD3-063E-481E-BE7C-1628ADA71849", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-feb-2024-r1:*:*:*:*:*:*", matchCriteriaId: "12C17130-A0C0-49E1-8525-9D65F0275270", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-jan-2022-r1:*:*:*:*:*:*", matchCriteriaId: "4FAA7790-A323-4ECA-834E-F19E59C571F5", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-jan-2023-r1:*:*:*:*:*:*", matchCriteriaId: "9CE09EF7-B024-4D79-9400-C8223CDFBB86", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-jan-2024-r1:*:*:*:*:*:*", matchCriteriaId: "C339A665-413D-443F-AD04-F71C161235D0", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-jul-2022-r1:*:*:*:*:*:*", matchCriteriaId: "213AC4D5-3B95-4120-B72D-A9327BADE2BC", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-jul-2023-r1:*:*:*:*:*:*", matchCriteriaId: "3DD61EDA-98ED-4309-B54F-0CF8B7D07DC7", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-jul-2024-r1:*:*:*:*:*:*", matchCriteriaId: "F7DCB465-A0F7-496E-BE45-0B5FA1508D93", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-jun-2022-r1:*:*:*:*:*:*", matchCriteriaId: "6D65C03E-7BC3-491A-8621-A8C93FBA0A69", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-jun-2023-r1:*:*:*:*:*:*", matchCriteriaId: "4ECB0B7A-590C-460C-878B-9A78CB37D259", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-jun-2024-r1:*:*:*:*:*:*", matchCriteriaId: "D66CF415-6C4A-4AF3-B660-B2E9CF484B51", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-mar-2022-r1:*:*:*:*:*:*", matchCriteriaId: "31B5B670-ACDE-4A64-97C5-358D79C65080", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-mar-2023-r1:*:*:*:*:*:*", matchCriteriaId: "EAFE015F-8130-4F10-A553-420F0BB2A132", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-mar-2024-r1:*:*:*:*:*:*", matchCriteriaId: "141E541B-8FA5-4829-A413-4F1DC19E9AE1", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-may-2022-r1:*:*:*:*:*:*", matchCriteriaId: "77CE3494-F7C0-497B-8491-107D31C9A91F", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-may-2023-r1:*:*:*:*:*:*", matchCriteriaId: "ACEA385E-3931-4438-A2A9-0357651F9B48", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-may-2024-r1:*:*:*:*:*:*", matchCriteriaId: "A57CB118-46CC-4CE8-ACC3-A806CD2C25A9", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-nov-2021-r1:*:*:*:*:*:*", matchCriteriaId: "84F3023F-E65C-4871-A65A-738EFF64D365", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-nov-2022-r1:*:*:*:*:*:*", matchCriteriaId: "6DD1F78D-EA98-4825-A0EA-703196DDE5E4", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-nov-2023-r1:*:*:*:*:*:*", matchCriteriaId: "BDDB3FBE-99EC-4763-961B-2C436D864A1A", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-oct-2022-r1:*:*:*:*:*:*", matchCriteriaId: "1B02110E-71FB-495F-86CA-F2A4E55C0E42", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-oct-2023-r1:*:*:*:*:*:*", matchCriteriaId: "931CC6D7-A42D-4482-B901-B539DFF89C3E", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-oct-2024-r1:*:*:*:*:*:*", matchCriteriaId: "F7EB9C6E-CF84-4E4D-94D8-39233F8EC4DD", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-sep-2022-r1:*:*:*:*:*:*", matchCriteriaId: "852A1BEC-438F-4D1E-B361-87BD57D50157", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-sep-2023-r1:*:*:*:*:*:*", matchCriteriaId: "84ED2366-D4BA-4094-94AC-AD6E7AEBB6FF", vulnerable: true, }, { criteria: "cpe:2.3:o:samsung:android:14.0:smr-sep-2024-r1:*:*:*:*:*:*", matchCriteriaId: "ABFE99DC-4495-4D4F-80D4-C29A1D22A9C5", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, ], cveTags: [], descriptions: [ { lang: "en", value: "Improper input validation in Settings Suggestions prior to SMR Nov-2024 Release 1 allows local attackers to launch privileged activities.", }, { lang: "es", value: "La validación de entrada incorrecta en las sugerencias de configuración anteriores a la versión 1 de SMR de noviembre de 2024 permite que atacantes locales inicien actividades privilegiadas.", }, ], id: "CVE-2024-49401", lastModified: "2024-11-12T16:10:18.870", metrics: { cvssMetricV31: [ { cvssData: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "NONE", baseScore: 5.1, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "LOW", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", version: "3.1", }, exploitabilityScore: 2.5, impactScore: 2.5, source: "mobile.security@samsung.com", type: "Secondary", }, { cvssData: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "NONE", baseScore: 7.1, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", version: "3.1", }, exploitabilityScore: 1.8, impactScore: 5.2, source: "nvd@nist.gov", type: "Primary", }, ], }, published: "2024-11-06T03:15:04.973", references: [ { source: "mobile.security@samsung.com", tags: [ "Vendor Advisory", ], url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=11", }, ], sourceIdentifier: "mobile.security@samsung.com", vulnStatus: "Analyzed", weaknesses: [ { description: [ { lang: "en", value: "NVD-CWE-noinfo", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
Title of the comment
Description of the comment
Loading…
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.