CVE-2024-20840
Assigner: SamsungMobile
Published: 2024-03-05T04:44:49.707Z
State: PUBLISHED
problemTypes: descriptions: description: CWE-284: Improper Access Control
affected: vendor: Samsung Mobile
product: Samsung Voice Recorder
versions: status: unaffected
version: 21.5.16.01 in Android 12 and Android 13, 21.4.51.02 in Android 14
defaultStatus: affected
descriptions: value: Improper access control in Samsung Voice Recorder prior to versions 21.5.16.01 in Android 12 and Android 13, 21.4.51.02 in Android 14 allows physical attackers using hardware keyboard to use VoiceRecorder on the lock screen.
metrics: format: CVSS
cvssV3_1: version: 3.1
attackVector: PHYSICAL
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: HIGH
baseSeverity: MEDIUM
baseScore: 5.7
vectorString: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H