Improper authentication in MTP application prior to SMR Jul-2024 Release 1 allows local attackers to enter MTP mode without proper authentication.
Metrics
No CVSS v4.0
Attack Vector Local
Attack Complexity High
Privileges Required None
Scope Unchanged
Confidentiality Impact Low
Integrity Impact Low
Availability Impact None
User Interaction None
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploitation none
Automatable no
Technical Impact partial
Affected Vendors & Products
Vendors | Products |
---|---|
Samsung |
|
Configuration 1 [-]
|
No data.
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: SamsungMobile
Published: 2024-07-02T09:20:51.920Z
Updated: 2024-08-01T22:06:37.204Z
Reserved: 2023-12-05T04:57:52.563Z
Link: CVE-2024-20900
Vulnrichment
Updated: 2024-07-02T13:46:23.455Z
NVD
Status : Modified
Published: 2024-07-02T10:15:05.690
Modified: 2024-11-21T08:53:23.687
Link: CVE-2024-20900
Redhat
No data.