CVE-2024-49407

Improper access control in Samsung Flow prior to version 4.9.15.7 allows physical attackers to access data across multiple user profiles

Medium · published November 6, 2024

CVSS v3.1
4.6
EPSS
0%
Percentile
10.4
In the wild
Unconfirmed
What it is

Improper access control in Samsung Flow prior to version 4.9.15.7 allows physical attackers to access data across multiple user profiles.

The record
Technical detail
CVSS v3.1
4.6 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00208 · 10.4th percentile
Published
2024-11-06T02:17Z
EPSS history
Timeline
  • 06 NOV 02:17Z
    Improper access control in Samsung Flow prior to version 4.9.15.7 allows physical attackers to access data across multiple user profiles
    cvelistv5