CVE-2024-49406

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-49406
Improper validation of integrity check value in Blockchain Keystore prior to version 1.3.16 allows local attackers to modify transaction. Root privilege is required for triggering this vulnerability.

4.4 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=11 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:samsung:blockchain_keystore:*:*:*:*:*:*:*:*
History

13 Nov 2024, 00:54

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 6.7 		v2 : unknown
v3 : 4.4
First Time Samsung
Samsung blockchain Keystore
References () https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=11 - () https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=11 - Vendor Advisory
CPE cpe:2.3:a:samsung:blockchain_keystore:*:*:*:*:*:*:*:*
CWE CWE-354

06 Nov 2024, 18:17

Type Values Removed Values Added
Summary
  • (es) La validación incorrecta del valor de verificación de integridad en Blockchain Keystore anterior a la versión 1.3.16 permite a los atacantes locales modificar la transacción. Se requiere privilegio de root para activar esta vulnerabilidad.

06 Nov 2024, 03:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-11-06 03:15

Updated : 2024-11-13 00:54

NVD link : CVE-2024-49406

Mitre link : CVE-2024-49406

CVE.ORG link : CVE-2024-49406

JSON object : View

Products Affected

samsung

  • blockchain_keystore
CWE
CWE-354

Improper Validation of Integrity Check Value