CVE-2024-20840 - CERT CVE
ID CVE-2024-20840
Sažetak Improper access control in Samsung Voice Recorder prior to versions 21.5.16.01 in Android 12 and Android 13, 21.4.51.02 in Android 14 allows physical attackers using hardware keyboard to use VoiceRecorder on the lock screen.
Reference
CVSS
Base: 5.7
Impact: 5.2
Exploitability:0.5
Pristup
VektorSloženostAutentikacija
PHYSICAL HIGH NONE
Impact
PovjerljivostCjelovitostDostupnost
HIGH NONE HIGH
CVSS vektor CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H
Zadnje važnije ažuriranje 14-02-2025 - 17:27
Objavljeno 05-03-2024 - 05:15