CVE-2024-20803 | THREATINT

Description

Improper authentication vulnerability in Bluetooth pairing process prior to SMR Jan-2024 Release 1 allows remote attackers to establish pairing process without user interaction.

Reserved 2023-12-05 | Published 2024-01-04 | Updated 2024-09-05 | Assigner SamsungMobile

MEDIUM: 6.8CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

Problem types

CWE-287 Improper Authentication

Product status

Default status

affected

SMR Jan-2024 Release in Android 11, 12, 13, 14

unaffected

References

security.samsungmobile.com/...Update.smsb?year=2024&month=01

cve.org (CVE-2024-20803)

nvd.nist.gov (CVE-2024-20803)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase

Subscribe to our newsletter to learn more about our work.