CVE-2024-20815

State: Published
Severity: 8.0 High
Published: Feb 6, 2024
Updated: Aug 19, 2024
Reserved: Dec 5, 2023

Description

Improper authentication vulnerability in onCharacteristicReadRequest in Auto Hotspot prior to SMR Feb-2024 Release 1 allows adjacent attackers connect to victim's mobile hotspot without user awareness.

Scores

CVSS	Score	Vector	Source
3.1	8.0 High	CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:H	SamsungMobile

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Samsung Mobile DevicesSamsung Mobile	SMR Feb-2024 Release in Android 11, 12, 13, 14Not affected

References

https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=02

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.