CVE-2024-49405 | THREATINT

Description

Improper authentication in Private Info in Samsung Pass in prior to version 4.4.04.7 allows physical attackers to access sensitive information in a specific scenario.

Reserved 2024-10-15 | Published 2024-11-06 | Updated 2024-11-06 | Assigner SamsungMobile

MEDIUM: 5.3CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Problem types

CWE-287 Improper Authentication

Product status

Default status

affected

4.4.04.7

unaffected

References

security.samsungmobile.com/...iceWeb.smsb?year=2024&month=11

cve.org (CVE-2024-49405)

nvd.nist.gov (CVE-2024-49405)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.