PT-2024-16823 · Transsion · Com.Transsion.Phoenix

Cnwatcher · Published 2024-11-14 · Updated 2025-09-05 · CVE-2024-11206

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions com.transsion.phoenix (affected versions not specified)

Description There is an unauthorized access vulnerability in the mobile application com.transsion.phoenix, which can lead to the leakage of user information. The issue affects TECNO devices and is considered high severity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Weakness Enumeration

CWE-359

CWE-269

Related Identifiers

CVE-2024-11206

Affected Products

Com.Transsion.Phoenix

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2024-11206 · Security Note
• https://security.tecno.com/SRC/securityUpdates · Note
• https://twitter.com/cracbot/status/1858752115205959778 · Twitter Post
• https://twitter.com/transilienceai/status/1858016809397399793 · Twitter Post
• https://security.tecno.com/SRC/blogdetail/340?lang=en_US · Note
• https://twitter.com/VulmonFeeds/status/1857092364898050533 · Twitter Post
• https://twitter.com/transilienceai/status/1858016814061494775 · Twitter Post
• https://t.me/cvenotify/101646 · Telegram Post
• https://t.me/cvedetector/10908 · Telegram Post
• https://twitter.com/CVEnew/status/1857065027540332762 · Twitter Post
• https://t.me/cveNotify/134364 · Telegram Post