PT-2024-25780 · Qksms · Qksms

Affan · Published 2024-04-07 · Updated 2024-05-17 · CVE-2024-3430

Positive Technologies (AI Summary)

CVSS v3.1

2.4

Low

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions QKSMS versions up to 3.9.4

Description A vulnerability was found in QKSMS, affecting an unknown part of the file androidmanifest.xml of the component Backup File Handler. The manipulation leads to exposure of backup file to an unauthorized control sphere. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used.

Recommendations For QKSMS versions up to 3.9.4, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-530

Related Identifiers

CVE-2024-3430

Affected Products

Qksms

References · 7

• 🔥 https://github.com/moezbhatti/qksms · Exploit
• https://osv.dev/vulnerability/CVE-2024-3430 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-3430 · Security Note
• https://t.me/cvenotify/75982 · Telegram Post
• https://vuldb.com/?submit.307756 · Note
• https://vuldb.com/?ctiid.259611 · Note
• https://vuldb.com/?id.259611 · Note