CVE-2024-34597

EPSS 0.06%
Published 02.07.2024 10:15:08
Last modified 21.11.2024 09:19:02
Source mobile.security@samsung.com
Teams watchlist Login
Open Login

Improper input validation in Samsung Health prior to version 6.27.0.113 allows local attackers to write arbitrary document files to the sandbox of Samsung Health. User interaction is required for triggering this vulnerability.

Affected products Warnungen 0 Metrics 3 CWE 0 References 4

Data is provided by the National Vulnerability Database (NVD)

Samsung ≫ Health Version < 6.27.0.113

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.06%	0.184

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	3.3	1.8	1.4	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
mobile.security@samsung.com	4.4	1.8	2.5	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=07

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-34597

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-34597

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-34597

EUVD