CVE-2019-20469

State
Published
Severity
4.6 Medium
Published
Nov 7, 2024
Updated
Nov 4, 2025
Reserved
Feb 17, 2020

Read the record on cve.org

Description

An issue was discovered on One2Track 2019-12-08 devices. Confidential information is needlessly stored on the smartwatch. Audio files are stored in .amr format, in the audior directory. An attacker who has physical access can retrieve all audio files by connecting via a USB cable.

Scores

CVSSScoreVectorSource
3.14.6 MediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCISA-ADP

Weaknesses

  • CWE-922 Insecure Storage of Sensitive Information

Affected Products

ProductVersions
n/an/a
  • n/aAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.