CVE-2024-41999
- State
- Published
- Severity
- 6.8 Medium
- Published
- Sep 30, 2024
- Updated
- Sep 30, 2024
- Reserved
- Sep 18, 2024
Description
Smart-tab Android app installed April 2023 or earlier contains an active debug code vulnerability. If this vulnerability is exploited, an attacker with physical access to the device may exploit the debug function to gain access to the OS functions, escalate the privilege, change the device's settings, or spoof devices in other rooms.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 6.8 Medium | CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | jpcert |
| 3.1 | 6.8 Medium | CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | CISA-ADP |
Weaknesses
- CWE-489 Active debug code
Affected Products
| Product | Versions |
|---|---|
Smart-tab Android appTECHNO SUPPORT COMPANY |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.