PT-2024-35811 · Fcnt · Fcnt Android

Published 2024-11-29 · Updated 2024-11-30 · CVE-2024-53701

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Low

Base vector

AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions FCNT Android devices (affected versions not specified)

Description The issue concerns the exposure of security settings on FCNT Android devices when the screen is unlocked by a user and an attacker can directly operate the device. This can lead to the modification of security settings without authentication, including the display and activation of hidden applications. The devices provide original security features such as "privacy mode", where arbitrary applications can be set not to be displayed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2024-53701

Affected Products

Fcnt Android

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-53701 · Security Note
• https://t.me/cvenotify/102695 · Telegram Post
• https://fcnt.com/consumernotice/20741 · Note
• https://jvn.jp/en/jp/JVN43845108 · Note
• https://twitter.com/VulmonFeeds/status/1862665163226124517 · Twitter Post
• https://twitter.com/CVEnew/status/1862373487010021583 · Twitter Post