Improper Verification of Cryptographic Signature in SmartSwitch prior to SMR Dec-2024 Release 1 allows local attackers to install malicious applications.
History

Tue, 03 Dec 2024 12:15:00 +0000

Type Values Removed Values Added
First Time appeared Samsung
Samsung android
CPEs cpe:2.3:o:samsung:android:13.0:smr-dec-2024-r1:*:*:*:*:*:*
cpe:2.3:o:samsung:android:14.0:smr-dec-2024-r1:*:*:*:*:*:*
Vendors & Products Samsung
Samsung android
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Tue, 03 Dec 2024 06:00:00 +0000

Type Values Removed Values Added
Description Improper Verification of Cryptographic Signature in SmartSwitch prior to SMR Dec-2024 Release 1 allows local attackers to install malicious applications.
References
Metrics cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L'}


cve-icon MITRE

Status: PUBLISHED

Assigner: SamsungMobile

Published: 2024-12-03T05:47:56.157Z

Updated: 2024-12-03T11:33:43.124Z

Reserved: 2024-10-15T05:26:08.660Z

Link: CVE-2024-49413

cve-icon Vulnrichment

Updated: 2024-12-03T11:29:13.198Z

cve-icon NVD

Status : Received

Published: 2024-12-03T06:15:09.303

Modified: 2024-12-03T06:15:09.303

Link: CVE-2024-49413

cve-icon Redhat

No data.