CVE-2024-41999

Published: Sep 30, 2024Modified: Jun 17, 2026Deferred

6.8

Vector

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.9 / Impact: 5.9

Source: vultures@jpcert.or.jp (Secondary)

Description

Smart-tab Android app installed April 2023 or earlier contains an active debug code vulnerability. If this vulnerability is exploited, an attacker with physical access to the device may exploit the debug function to gain access to the OS functions, escalate the privilege, change the device's settings, or spoof devices in other rooms.

Related CWEs

CWE-489

Active Debug Code

The product is deployed to unauthorized actors with debugging code still enabled or active, which can create unintended entry points or expose sensitive information.

References (2)

https://jvn.jp/en/jp/JVN42445661/

Source: vultures@jpcert.or.jp

https://tsc-soft.co.jp/smart-tab/

Source: vultures@jpcert.or.jp

Timeline

No history available yet.