CVE-2024-34682 — Vulnetix

Try Vulnetix Request Demo

CVE-2024-34682 PUBLISHED CVSS 2.4000000953674316 LOW

Improper authorization in Settings prior to SMR Nov-2024 Release 1 allows physical attackers to access stored WiFi password in Maintenance Mode.

EPSS 0.17% · 38.4th percentile

Risk Scores

CVSS v3.1

2.4000000953674316

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS Score

0.17%

38.4th percentile

Affected Products

Vendor	Product	Versions
samsung	android	14.0, 14.0, 14.0
Samsung Mobile	Samsung Mobile Devices	SMR Nov-2024 Release in Android 14

Timeline

Nov 6, 2024 EPSS Score
Nov 6, 2024 Coalition ESS Score
Nov 6, 2024 Coalition ESS Score
Nov 6, 2024 CVE Published
Nov 6, 2024 PoC Published
Nov 6, 2024 PoC Published
Nov 13, 2024 Coalition ESS Score
Nov 13, 2024 CVE Updated
Nov 23, 2024 EPSS Score
Dec 12, 2024 EPSS Score
Dec 29, 2024 EPSS Score
Jan 15, 2025 EPSS Score

References

Open in Interactive Console →