CVE-2024-34674 — Vulnetix

Try Vulnetix Request Demo

CVE-2024-34674 PUBLISHED CVSS 4.599999904632568 MEDIUM

Improper access control in Contacts prior to SMR Nov-2024 Release 1 allows physical attackers to access data across multiple user profiles.

EPSS 0.16% · 36.5th percentile

Risk Scores

CVSS v3.1

4.599999904632568

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Score

0.16%

36.5th percentile

Affected Products

Vendor	Product	Versions
Samsung Mobile	Samsung Mobile Devices	SMR Nov-2024 Release in Android 12, 13, 14
samsung	android	12.0, 12.0, 12.0

Timeline

Nov 6, 2024 EPSS Score
Nov 6, 2024 Coalition ESS Score
Nov 6, 2024 Coalition ESS Score
Nov 6, 2024 CVE Published
Nov 6, 2024 PoC Published
Nov 6, 2024 PoC Published
Nov 12, 2024 Coalition ESS Score
Nov 12, 2024 CVE Updated
Nov 23, 2024 EPSS Score
Dec 12, 2024 EPSS Score
Dec 29, 2024 EPSS Score
Jan 15, 2025 EPSS Score

References

Open in Interactive Console →