CVE-2024-49402 — Vulnetix

Try Vulnetix Request Demo

CVE-2024-49402 PUBLISHED CVSS 4.599999904632568 MEDIUM

Improper input validation in Dressroom prior to SMR Nov-2024 Release 1 allow physical attackers to access data across multiple user profiles.

EPSS 0.12% · 31.4th percentile

Risk Scores

CVSS v3.1

4.599999904632568

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Score

0.12%

31.4th percentile

Affected Products

Vendor	Product	Versions
Samsung Mobile	Samsung Mobile Devices	SMR Nov-2024 Release in Android 14
samsung	android	14.0, 14.0, 14.0

Timeline

Nov 6, 2024 EPSS Score
Nov 6, 2024 Coalition ESS Score
Nov 6, 2024 Coalition ESS Score
Nov 6, 2024 CVE Published
Nov 6, 2024 PoC Published
Nov 6, 2024 PoC Published
Nov 12, 2024 Coalition ESS Score
Nov 23, 2024 EPSS Score
Dec 12, 2024 EPSS Score
Dec 29, 2024 EPSS Score
Jan 15, 2025 EPSS Score
Feb 2, 2025 EPSS Score

References

Open in Interactive Console →