PT-2024-29990 · Unknown · Smart-Tab Android App

Shuto Imai · Published 2024-09-30 · Updated 2024-09-30 · CVE-2024-42496

Positive Technologies (AI Summary)

CVSS v3.1

2.4

Low

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Smart-tab Android app versions April 2023 or earlier

Description The issue concerns the storage of passwords in plaintext. If exploited, an attacker with physical access to the device may retrieve credential information and spoof the device to access related external services.

Recommendations For versions April 2023 or earlier, consider removing or updating the app to prevent potential exploitation, as the plaintext storage of passwords poses a significant risk. As a temporary workaround, restrict access to sensitive information on devices with the affected app until a secure version is installed.

Fix

Weakness Enumeration

CWE-256

Related Identifiers

CVE-2024-42496

Affected Products

Smart-Tab Android App

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-42496 · Security Note
• https://t.me/cvedetector/6645 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1840705769580167409 · Twitter Post
• https://jvn.jp/en/jp/JVN42445661 · Note
• https://twitter.com/CVEnew/status/1840668536911397245 · Twitter Post
• https://t.me/cvenotify/96521 · Telegram Post
• https://tsc-soft.co.jp/smart-tab · Note