CVE-2024-20885
CVSS 3.1 Score 5.1 of 10 (medium)
Details
Summary
CVE-2024-20885 is an improper component protection vulnerability in Samsung Dialer prior to SMR May-2024 Release 1, which allows local attackers to make a call without proper permission. The affected product is Samsung Dialer on unspecified devices. The vulnerability has a base severity of MEDIUM with a base score of 5.1 according to the CVSS:3.1 rating. It requires no privileges and user interaction, and its attack vector is local. The impact includes low confidentiality and integrity impacts, with low availability impact as well. The exploitability score is 2.5 out of 10. To remediate the vulnerability, users should update their Samsung Dialer to SMR May-2024 Release 1 or later versions provided by Samsung. This vulnerability poses a potential danger to organizations using the affected Samsung Dialer as it allows unauthorized calls to be made without proper permission from local attackers.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions