← volver
CVE-2024-3124

fridgecow smartalarm Backup File androidmanifest.xml backup

CVSS 2.4 LOWEPSS 0.3%CWE-530
Vexday Risk Score
8Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 2.4EPSS 0.3%KEV nãoPoC Nuclei Metasploit Patch
Ciclo de vida
01 abr 2024Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A vulnerability classified as problematic has been found in fridgecow smartalarm 1.8.1 on Android. This affects an unknown part of the file androidmanifest.xml of the component Backup File Handler. The manipulation leads to exposure of backup file to an unauthorized control sphere. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-258867.
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Productos afectados
fridgecow · smartalarm

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →