
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2024-34642 is a security vulnerability affecting Samsung's One UI Home prior to SMR Sep-2024 Release 1. The vulnerability was discovered and privately disclosed, with the official publication date being September 4, 2024. The issue affects Samsung devices running Android versions 12, 13, and 14 (Samsung Mobile Security).
The vulnerability is classified as an improper authorization issue in One UI Home. It has been assigned a CVSS v3.1 base score of 4.6 (Medium) with the vector string CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. The vulnerability is associated with CWE-863 (Incorrect Authorization) (NVD).
When exploited, this vulnerability allows physical attackers to temporarily access sensitive information. The attack requires physical access to the device but does not require any special privileges or user interaction to execute (Samsung Mobile Security).
Samsung has addressed this vulnerability in the SMR Sep-2024 Release 1 security update. Users are advised to update their devices to this version or later to protect against this vulnerability. The patch adds proper authorization verification to prevent unauthorized access to sensitive information (Samsung Mobile Security).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."