CVE-2024-40240

Name of the Vulnerable Software and Affected Versions HomeServe Home Repair android app version 3.3.4

Description An issue with access control in the HomeServe Home Repair android app allows a physically proximate attacker to escalate privileges via the fingerprint authentication function. This enables the attacker to gain unauthorized access.

Recommendations For version 3.3.4, consider disabling the fingerprint authentication function as a temporary workaround until a patch is available. Restrict access to sensitive features that rely on fingerprint authentication to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.