CVE-2024-29153
First published: Tue Jul 09 2024(Updated: )
A vulnerability was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos W930, Exynos Modem 5123, and Exynos Modem 5300 that involves incorrect authorization of LTE NAS messages and leads to downgrading to lower network generations and repeated DDOS.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Samsung Mobile Processor | =Exynos 9820=Exynos 9825=Exynos 980=Exynos 990=Exynos 850=Exynos 1080=Exynos 2100=Exynos 2200=Exynos 1280=Exynos 1380=Exynos 1330=Exynos 9110=Exynos W920=Exynos W930=Exynos Modem 5123=Exynos Modem 5300 | |
| Samsung Wearable Processor | =Exynos W920=Exynos W930 | |
| Samsung Modems | =Exynos Modem 5123=Exynos Modem 5300 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-29153?
The severity of CVE-2024-29153 is currently classified as critical due to its potential impact on Samsung devices.
How do I fix CVE-2024-29153?
To fix CVE-2024-29153, ensure that your affected Samsung devices are updated to the latest firmware provided by Samsung.
What devices are affected by CVE-2024-29153?
CVE-2024-29153 affects various Samsung Mobile Processors, Wearable Processors, and Modems including Exynos 9820, Exynos 990, Exynos W920, among others.
What are the potential risks of CVE-2024-29153?
The potential risks of CVE-2024-29153 include unauthorized access to device features and sensitive data exploitation.
Is there a public security update for CVE-2024-29153?
Yes, Samsung has announced that security updates addressing CVE-2024-29153 are available through their support channels.
- agent/references
- agent/type
- agent/first-publish-date
- agent/severity
- agent/author
- collector/nvd-api
- source/NVD
- agent/weakness
- agent/event
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- vendor/samsung
- canonical/samsung mobile processor
- canonical/samsung wearable processor
- canonical/samsung modems