PT-2024-26061 · Samsung · One Ui Home

Elias Schröder · Published 2024-09-03 · Updated 2024-09-05 · CVE-2024-34642

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions One UI Home versions prior to SMR Sep-2024 Release 1

Description The issue is related to improper authorization, allowing physical attackers to temporarily access sensitive information. This can be exploited by physical attackers.

Recommendations For One UI Home versions prior to SMR Sep-2024 Release 1, update to the SMR Sep-2024 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting physical access to devices running the affected software to minimize the risk of exploitation.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2024-34642

Affected Products

One Ui Home

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-34642 · Security Note
• https://osv.dev/vulnerability/CVE-2024-34642 · Vendor Advisory
• https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1831291243751449057 · Twitter Post
• https://twitter.com/CVEnew/status/1831208389197648158 · Twitter Post
• https://t.me/cvenotify/93147 · Telegram Post