CVE-2019-20469

Published: Nov 7, 2024Modified: Jun 17, 2026Deferred

4.6

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 0.9 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An issue was discovered on One2Track 2019-12-08 devices. Confidential information is needlessly stored on the smartwatch. Audio files are stored in .amr format, in the audior directory. An attacker who has physical access can retrieve all audio files by connecting via a USB cable.

Related CWEs

CWE-922

Insecure Storage of Sensitive Information

The product stores sensitive information without properly limiting read or write access by unauthorized actors.

References (3)

https://seclists.org/fulldisclosure/2024/Jul/14

Source: cve@mitre.org

https://www.one2track.nl

Source: cve@mitre.org

http://seclists.org/fulldisclosure/2024/Jul/14

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.