VulnerabilityDeferred

CVE-2024-41999

Smart-tab Android app installed April 2023 or earlier contains an active debug code vulnerability.

MEDIUM 6.8EPSS 0.26%

Does this matter?

Lower severity and a low EPSS score (0.26%). Track it; it rarely justifies an emergency change on its own.

Description

Smart-tab Android app installed April 2023 or earlier contains an active debug code vulnerability. If this vulnerability is exploited, an attacker with physical access to the device may exploit the debug function to gain access to the OS functions, escalate the privilege, change the device's settings, or spoof devices in other rooms.

CVSS 3.1: 6.8 MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.26% probability · 18th percentile
CISA KEV: Not listed
Weakness: CWE-489
Source: vultures@jpcert.or.jp

References

https://jvn.jp/en/jp/JVN42445661/
https://tsc-soft.co.jp/smart-tab/

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.