PT-2024-23881 · Unknown · Fridgecow Smartalarm

Affan · Published 2024-04-01 · Updated 2024-05-17 · CVE-2024-3124

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions fridgecow smartalarm version 1.8.1

Description A problematic vulnerability has been found in the component Backup File Handler, affecting an unknown part of the file androidmanifest.xml. This leads to exposure of backup files to an unauthorized control sphere, allowing attacks to be launched on the physical device.

Recommendations For version 1.8.1, restrict backups and update the app as soon as possible. Additionally, audit file permissions to minimize the risk of exploitation. As a temporary workaround, consider restricting access to the Backup File Handler component until a patch is available.

Exploit

Fix

Weakness Enumeration

CWE-530

Related Identifiers

CVE-2024-3124

Affected Products

Fridgecow Smartalarm

References · 7

• 🔥 https://github.com/ctflearner/Android_Findings/blob/main/Smartalarm/Backup.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-3124 · Security Note
• https://vuldb.com/?id.258867 · Note
• https://vuldb.com/?submit.307752 · Note
• https://twitter.com/oktsec/status/1777381345422987381 · Twitter Post
• https://vuldb.com/?ctiid.258867 · Note
• https://t.me/cvenotify/75338 · Telegram Post