Skip to main content

Account CVE-2024-20841

MEDIUM
Incorrect Default Permissions (CWE-276)
2024-03-05 mobile.security@samsung.com
Privilege Escalation Samsung Account
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Mar 05, 2024 - 05:15 nvd
MEDIUM 5.5

DescriptionNVD

Improper Handling of Insufficient Privileges in Samsung Account prior to version 14.8.00.3 allows local attackers to access data.

AnalysisAI

Improper Handling of Insufficient Privileges in Samsung Account prior to version 14.8.00.3 allows local attackers to access data. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Incorrect Default Permissions (CWE-276), which allows attackers to access resources due to overly permissive default settings. Improper Handling of Insufficient Privileges in Samsung Account prior to version 14.8.00.3 allows local attackers to access data. Affected products include: Samsung Account. Version information: version 14.8.00.3.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Set restrictive default permissions, follow principle of least privilege, review defaults during deployment.

More in Account

View all
CVE-2026-21264 CRITICAL
9.3 Jan 22

Microsoft Account has a cross-site scripting vulnerability allowing unauthenticated attackers to execute scripts in the

CVE-2021-25381 HIGH
7.8 Apr 09

Using unsafe PendingIntent in Samsung Account in versions 10.8.0.4 in Android P(9.0) and below, and 12.1.1.3 in Android

CVE-2022-30735 HIGH
7.5 Jun 07

Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the access_tok
CVE-2022-30732 HIGH
7.5 Jun 07

Exposure of Sensitive Information vulnerability in Samsung Account prior to version 13.2.00.6 allows attacker to access

CVE-2023-42551 MEDIUM
6.5 Nov 07

Use of implicit intent for sensitive communication vulnerability in startTncActivity in Samsung Account prior to version
CVE-2023-42550 MEDIUM
6.5 Nov 07

Use of implicit intent for sensitive communication vulnerability in startSignIn in Samsung Account prior to version 14.5
CVE-2023-42549 MEDIUM
6.5 Nov 07

Use of implicit intent for sensitive communication vulnerability in startNameValidationActivity in Samsung Account prior
CVE-2023-42548 MEDIUM
6.5 Nov 07

Use of implicit intent for sensitive communication vulnerability in startMandatoryCheckActivity in Samsung Account prior
CVE-2023-42547 MEDIUM
6.5 Nov 07

Use of implicit intent for sensitive communication vulnerability in startEmailValidationActivity in Samsung Account prio
CVE-2023-42546 MEDIUM
6.5 Nov 07

Use of implicit intent for sensitive communication vulnerability in startAgreeToDisclaimerActivity in Samsung Account pr
CVE-2023-42540 MEDIUM
5.5 Nov 07

Improper access control vulnerability in Samsung Account prior to version 14.5.01.1 allows attackers to access sensitive
CVE-2022-39874 MEDIUM
5.5 Oct 07

Sensitive log information leakage vulnerability in Samsung Account prior to version 13.5.0 allows attackers to unauthori

Same weakness CWE-276 – Incorrect Default Permissions

View all
CVE-2013-0632 CRITICAL POC
9.8
CVE-2017-11610 HIGH POC
8.8
CVE-2022-22948 MEDIUM POC
6.5
CVE-2017-8625 HIGH POC
8.8
CVE-2016-5425 HIGH POC
7.8
CVE-2024-55215 CRITICAL POC
9.8
CVE-2024-57604 CRITICAL POC
9.8
CVE-2025-60262 CRITICAL POC
9.8

Same technique Privilege Escalation

View all
CVE-2025-47812 CRITICAL POC
10.0
CVE-2013-0422 CRITICAL POC
9.8
CVE-2013-0632 CRITICAL POC
9.8
CVE-2017-5689 CRITICAL POC
9.8
CVE-2017-12635 CRITICAL POC
9.8
CVE-2016-10372 CRITICAL POC
9.8
CVE-2014-9583 CRITICAL POC
10.0
CVE-2012-0297 CRITICAL POC
10.0

Share

CVE-2024-20841 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy