2 lines
2.5 KiB
JSON
2 lines
2.5 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"com.transsion.carlcare","vendor":"TECNO","versions":[{"status":"affected","version":"5.8.1.4"}]}],"source":"907edf6c-bf03-423e-ab1a-8da27e1aa1ea"},{"affectedData":[{"cpes":["cpe:2.3:a:tecno:com.transsion.carlcare:-:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"com.transsion.carlcare","vendor":"tecno","versions":[{"status":"affected","version":"5.8.1.4"}]}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper permission settings for mobile applications (com.transsion.carlcare) may lead to user password and account security risks."},{"lang":"es","value":"La configuración incorrecta de permisos para aplicaciones móviles (com.transsion.carlcare) puede provocar riesgos de seguridad de la cuenta y la contraseña del usuario."}],"id":"CVE-2024-5163","lastModified":"2026-06-17T08:15:19.567","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-5163","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2024-06-18T13:48:34.000016Z","version":"2.0.3"}}]},"published":"2024-06-17T03:15:09.057","references":[{"source":"907edf6c-bf03-423e-ab1a-8da27e1aa1ea","url":"https://security.tecno.com/SRC/blogdetail/267?lang=en_US"},{"source":"907edf6c-bf03-423e-ab1a-8da27e1aa1ea","url":"https://security.tecno.com/SRC/securityUpdates?type=SA"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://security.tecno.com/SRC/blogdetail/267?lang=en_US"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://security.tecno.com/SRC/securityUpdates"}],"sourceIdentifier":"907edf6c-bf03-423e-ab1a-8da27e1aa1ea","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-732"}],"source":"907edf6c-bf03-423e-ab1a-8da27e1aa1ea","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-280"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
|