{"id":"CVE-2024-41999","state":"PUBLISHED","title":"Smart-tab Android app installed April 2023 or earlier contains an active debug code vulnerability. If this vulnerability is exploited, an attacker with physical access to the devic","description":"Smart-tab Android app installed April 2023 or earlier contains an active debug code vulnerability. If this vulnerability is exploited, an attacker with physical access to the device may exploit the debug function to gain access to the OS functions, escalate the privilege, change the device's settings, or spoof devices in other rooms.","publishedAt":"2024-09-30T07:50:34.536Z","updatedAt":"2024-09-30T16:45:01.184Z","severity":{"score":6.8,"label":"Medium","version":"3.0","vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","source":"jpcert"},"assigner":"jpcert","products":["TECHNO SUPPORT COMPANY Smart-tab Android app"],"affected":[{"vendor":"TECHNO SUPPORT COMPANY","product":"Smart-tab Android app","versions":[{"version":"installed April 2023 or earlier","status":"affected"}]}],"references":["https://tsc-soft.co.jp/smart-tab/","https://jvn.jp/en/jp/JVN42445661/"],"weaknesses":["CWE-489"],"ingestedAt":"2026-10-29T20:07:39.287Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/41xxx/CVE-2024-41999.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-41999","state":"PUBLISHED","datePublished":"2024-09-30T07:50:34.536Z","dateUpdated":"2024-09-30T16:45:01.184Z","assignerShortName":"jpcert","assignerOrgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateReserved":"2024-09-18T23:09:30.952Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Smart-tab Android app installed April 2023 or earlier contains an active debug code vulnerability. If this vulnerability is exploited, an attacker with physical access to the device may exploit the debug function to gain access to the OS functions, escalate the privilege, change the device's settings, or spoof devices in other rooms."}],"affected":[{"vendor":"TECHNO SUPPORT COMPANY","product":"Smart-tab Android app","versions":[{"version":"installed April 2023 or earlier","status":"affected"}]}],"references":[{"url":"https://tsc-soft.co.jp/smart-tab/"},{"url":"https://jvn.jp/en/jp/JVN42445661/"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_0":{"version":"3.0","baseSeverity":"MEDIUM","baseScore":6.8,"vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-489","description":"Active debug code","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"shortName":"jpcert","orgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateUpdated":"2024-09-30T07:50:34.536Z"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"android_app","product":"smart_tab","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"*","versionType":"custom"}],"cpes":["cpe:2.3:a:android_app:smart_tab:*:*:*:*:*:*:*:*"]}],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.8,"attackVector":"PHYSICAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2024-09-30T16:41:52.476692Z","id":"CVE-2024-41999","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-09-30T16:45:01.184Z"}}]}}}