PT-2024-29990

CVE-2024-42496

·

Published

2024-09-30

·

Updated

2024-09-30

Description by

CVSS 3.1
2.4
Low
MetricsAV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Smart-tab Android app versions April 2023 or earlier
Description The issue concerns the storage of passwords in plaintext. If exploited, an attacker with physical access to the device may retrieve credential information and spoof the device to access related external services.
Recommendations For versions April 2023 or earlier, consider removing or updating the app to prevent potential exploitation, as the plaintext storage of passwords poses a significant risk. As a temporary workaround, restrict access to sensitive information on devices with the affected app until a secure version is installed.
Exploitability
Fix
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾