CVE-2024-32670 | THREATINT

Description

Exposure of Sensitive Information to an Unauthorized Actor in Samsung Galaxy SmartTag2 prior to 0.20.04 allows attackes to potentially identify the tag's location by scanning the BLE adversting.

PUBLISHED Reserved 2024-04-17 | Published 2024-07-10 | Updated 2024-08-02 | Assigner samsung.tv_appliance

HIGH: 7.0CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

Problem types

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

Product status

Default status

unaffected

0.20.04

affected

References

securityreport.samsung.com

cve.org (CVE-2024-32670)

nvd.nist.gov (CVE-2024-32670)

Download JSON