CVE-2024-49406

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-49406
Improper validation of integrity check value in Blockchain Keystore prior to version 1.3.16 allows local attackers to modify transaction. Root privilege is required for triggering this vulnerability.

4.4 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=11 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:samsung:blockchain_keystore:*:*:*:*:*:*:*:*
History

13 Nov 2024, 00:54

Type Values Removed Values Added
CPE cpe:2.3:a:samsung:blockchain_keystore:*:*:*:*:*:*:*:*
CWE CWE-354
References () https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=11 - () https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=11 - Vendor Advisory
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.4
First Time Samsung
Samsung blockchain Keystore

06 Nov 2024, 03:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-11-06 03:15

Updated : 2024-11-13 00:54

NVD link : CVE-2024-49406

Mitre link : CVE-2024-49406

JSON object : View

Products Affected

samsung

  • blockchain_keystore
CWE
CWE-354

Improper Validation of Integrity Check Value