CVE-2024-49405: Medium severity samsung pass vulnerability
Published Nov 6, 2024
·Updated
Improper authentication in Private Info in Samsung Pass in prior to version 4.4.04.7 allows physical attackers to access sensitive information in a specific scenario.
Affected Software
1 affected component
Samsung Pass<4.4.04.7
Event History
Nov 6, 2024
CVE Published
via MITRE·02:17 AM
Data Sourced
via MITRE·02:17 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2024-49405?
CVE-2024-49405 is considered a medium severity vulnerability due to improper authentication that could expose sensitive information.
2
How do I fix CVE-2024-49405?
To fix CVE-2024-49405, update Samsung Pass to version 4.4.04.7 or later.
3
What information is affected by CVE-2024-49405?
CVE-2024-49405 allows physical attackers to access sensitive information stored in the Samsung Pass app.
4
In which versions of Samsung Pass is CVE-2024-49405 present?
CVE-2024-49405 is present in Samsung Pass versions prior to 4.4.04.7.
5
What does improper authentication in CVE-2024-49405 mean?
Improper authentication in CVE-2024-49405 means that the security measures for verifying user access are inadequate, allowing unauthorized access.