Improper Access Control in Nearby Device Scanning by Samsung
CVE-2024-20808

4MEDIUM

Key Information:

Vendor

Samsung
Status
Nearby Device Scanning
Vendor
CVE Published:
4 January 2024

What is CVE-2024-20808?

An improper access control vulnerability exists in Samsung's Nearby device scanning feature, prior to version 11.1.14.7. This flaw potentially allows a local attacker to gain unauthorized access to sensitive data, posing risks to user privacy and security. Users are encouraged to update to the latest version to mitigate these risks and ensure their data remains protected.

Affected Version(s)

Nearby device scanning 11.1.14.7

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V3.1

Score:
4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.