CVE-2024-42496

State: Published
Severity: 2.4 Low
Published: Sep 30, 2024
Updated: Sep 30, 2024
Reserved: Sep 18, 2024

Description

Smart-tab Android app installed April 2023 or earlier contains an issue with plaintext storage of a password. If this vulnerability is exploited, an attacker with physical access to the device may retrieve the credential information and spoof the device to access the related external service.

Scores

CVSS	Score	Vector	Source
3.0	2.4 Low	CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	jpcert

Weaknesses

CWE-256 Plaintext storage of a password

Affected Products

Product	Versions
Smart-tab Android appTECHNO SUPPORT COMPANY	installed April 2023 or earlierAffected

References

https://tsc-soft.co.jp/smart-tab/
https://jvn.jp/en/jp/JVN42445661/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.