VulnerabilityDeferred

CVE-2024-42496

If this vulnerability is exploited, an attacker with physical access to the device may retrieve the credential information and spoof the device to access the related external service.

LOW 2.4EPSS 0.19%

Does this matter?

Lower severity and a low EPSS score (0.19%). Track it; it rarely justifies an emergency change on its own.

Description

Smart-tab Android app installed April 2023 or earlier contains an issue with plaintext storage of a password. If this vulnerability is exploited, an attacker with physical access to the device may retrieve the credential information and spoof the device to access the related external service.

CVSS 3.0: 2.4 LOWCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS: 0.19% probability · 9th percentile
CISA KEV: Not listed
Weakness: CWE-256
Source: vultures@jpcert.or.jp

References

https://jvn.jp/en/jp/JVN42445661/
https://tsc-soft.co.jp/smart-tab/

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.