Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
Vulnerability Details :

CVE-2024-6780

Summary
Assigner-TECNOMobile
Assigner Org ID-907edf6c-bf03-423e-ab1a-8da27e1aa1ea
Published At-16 Jul, 2024 | 01:51
Updated At-30 Oct, 2024 | 13:51
Rejected At-
Credits

Improper permission control in com.android.server.telecom

Improper permission control in the mobile application (com.android.server.telecom) may lead to user information security risks.

Vendors
-
Not available
Products
-
Metrics (CVSS)
VersionBase scoreBase severityVector
Weaknesses
Attack Patterns
Solution/Workaround
References
HyperlinkResource Type
EPSS History
Score
Latest Score
-
N/A
No data available for selected date range
Percentile
Latest Percentile
-
N/A
No data available for selected date range
Stakeholder-Specific Vulnerability Categorization (SSVC)
▼Common Vulnerabilities and Exposures (CVE)
cve.org
Assigner:TECNOMobile
Assigner Org ID:907edf6c-bf03-423e-ab1a-8da27e1aa1ea
Published At:16 Jul, 2024 | 01:51
Updated At:30 Oct, 2024 | 13:51
Rejected At:
▼CVE Numbering Authority (CNA)
Improper permission control in com.android.server.telecom

Improper permission control in the mobile application (com.android.server.telecom) may lead to user information security risks.

Affected Products
Vendor
TECNO MOBILE LIMITEDTECNO
Product
com.android.server.telecom
Default Status
unaffected
Versions
Affected
  • 33
Problem Types
TypeCWE IDDescription
CWECWE-732CWE-732 Incorrect Permission Assignment for Critical Resource
Type: CWE
CWE ID: CWE-732
Description: CWE-732 Incorrect Permission Assignment for Critical Resource
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
CAPEC-131CAPEC-131 Resource Leak Exposure
CAPEC ID: CAPEC-131
Description: CAPEC-131 Resource Leak Exposure
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://security.tecno.com/SRC/blogdetail/276?lang=en_US
N/A
https://security.tecno.com/SRC/securityUpdates?type=SA
N/A
Hyperlink: https://security.tecno.com/SRC/blogdetail/276?lang=en_US
Resource: N/A
Hyperlink: https://security.tecno.com/SRC/securityUpdates?type=SA
Resource: N/A
▼Authorized Data Publishers (ADP)
1. CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
3.13.3LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Version: 3.1
Base score: 3.3
Base severity: LOW
Vector:
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
2. CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://security.tecno.com/SRC/blogdetail/276?lang=en_US
x_transferred
https://security.tecno.com/SRC/securityUpdates
x_transferred
Hyperlink: https://security.tecno.com/SRC/blogdetail/276?lang=en_US
Resource:
x_transferred
Hyperlink: https://security.tecno.com/SRC/securityUpdates
Resource:
x_transferred
Information is not available yet
▼National Vulnerability Database (NVD)
nvd.nist.gov
Source:907edf6c-bf03-423e-ab1a-8da27e1aa1ea
Published At:16 Jul, 2024 | 02:15
Updated At:30 Oct, 2024 | 14:35

Improper permission control in the mobile application (com.android.server.telecom) may lead to user information security risks.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary3.13.3LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Type: Secondary
Version: 3.1
Base score: 3.3
Base severity: LOW
Vector:
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CPE Matches
Weaknesses
CWE IDTypeSource
CWE-732Secondary907edf6c-bf03-423e-ab1a-8da27e1aa1ea
CWE ID: CWE-732
Type: Secondary
Source: 907edf6c-bf03-423e-ab1a-8da27e1aa1ea
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
https://security.tecno.com/SRC/blogdetail/276?lang=en_US907edf6c-bf03-423e-ab1a-8da27e1aa1ea
N/A
https://security.tecno.com/SRC/securityUpdates?type=SA907edf6c-bf03-423e-ab1a-8da27e1aa1ea
N/A
Hyperlink: https://security.tecno.com/SRC/blogdetail/276?lang=en_US
Source: 907edf6c-bf03-423e-ab1a-8da27e1aa1ea
Resource: N/A
Hyperlink: https://security.tecno.com/SRC/securityUpdates?type=SA
Source: 907edf6c-bf03-423e-ab1a-8da27e1aa1ea
Resource: N/A

Change History

0
Information is not available yet

Similar CVEs

6Records found
CVE-2024-10018
Matching Score-6
Assigner-TECNO Mobile Limited
ShareView Details
Matching Score-6
Assigner-TECNO Mobile Limited
CVSS Score-9.8||CRITICAL
EPSS-0.07% / 22.43%
||
7 Day CHG~0.00%
Published-16 Oct, 2024 | 02:33
Updated-16 Oct, 2024 | 18:35
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Improper permission control in the mobile application (com.transsion.aivoiceassistant) can lead to the launch of any unexported component.

Action-Not Available
Vendor-TECNO MOBILE LIMITED
Product-com.transsion.aivoiceassistantcom.transsion.aivoiceassistant
CWE ID-CWE-732
Incorrect Permission Assignment for Critical Resource
CVE-2025-0590
Matching Score-6
Assigner-TECNO Mobile Limited
ShareView Details
Matching Score-6
Assigner-TECNO Mobile Limited
CVSS Score-7.5||HIGH
EPSS-0.09% / 26.17%
||
7 Day CHG+0.01%
Published-20 Jan, 2025 | 06:22
Updated-24 Mar, 2025 | 18:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Improper permission settings for mobile applications (com.transsion.carlcare) may lead to information leakage risk.

Action-Not Available
Vendor-TECNO MOBILE LIMITED
Product-com.transsion.carlcare
CWE ID-CWE-732
Incorrect Permission Assignment for Critical Resource
CVE-2024-8039
Matching Score-6
Assigner-TECNO Mobile Limited
ShareView Details
Matching Score-6
Assigner-TECNO Mobile Limited
CVSS Score-9.8||CRITICAL
EPSS-0.20% / 42.01%
||
7 Day CHG~0.00%
Published-14 Sep, 2024 | 03:28
Updated-17 Sep, 2024 | 02:35
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Improper permission configurationDomain configuration vulnerability of the mobile application (com.afmobi.boomplayer) can lead to account takeover risks.

Action-Not Available
Vendor-TECNO MOBILE LIMITED
Product-com.afmobi.boomplayercom.afmobi.boomplayer
CWE ID-CWE-732
Incorrect Permission Assignment for Critical Resource
CVE-2024-5163
Matching Score-6
Assigner-TECNO Mobile Limited
ShareView Details
Matching Score-6
Assigner-TECNO Mobile Limited
CVSS Score-9.8||CRITICAL
EPSS-0.12% / 32.28%
||
7 Day CHG~0.00%
Published-17 Jun, 2024 | 03:07
Updated-21 Aug, 2024 | 05:48
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Improper permission settings in com.transsion.carlcare

Improper permission settings for mobile applications (com.transsion.carlcare) may lead to user password and account security risks.

Action-Not Available
Vendor-TECNO MOBILE LIMITED
Product-com.transsion.carlcarecom.transsion.carlcare
CWE ID-CWE-732
Incorrect Permission Assignment for Critical Resource
CWE ID-CWE-280
Improper Handling of Insufficient Permissions or Privileges
CVE-2019-13679
Matching Score-4
Assigner-Chrome
ShareView Details
Matching Score-4
Assigner-Chrome
CVSS Score-3.3||LOW
EPSS-0.17% / 38.91%
||
7 Day CHG~0.00%
Published-25 Nov, 2019 | 14:22
Updated-04 Aug, 2024 | 23:57
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Insufficient policy enforcement in PDFium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to show print dialogs via a crafted PDF file.

Action-Not Available
Vendor-Google LLC
Product-chromeChrome
CWE ID-CWE-732
Incorrect Permission Assignment for Critical Resource
CVE-2022-41926
Matching Score-4
Assigner-GitHub, Inc.
ShareView Details
Matching Score-4
Assigner-GitHub, Inc.
CVSS Score-3.3||LOW
EPSS-0.03% / 7.63%
||
7 Day CHG~0.00%
Published-25 Nov, 2022 | 00:00
Updated-23 Apr, 2025 | 16:34
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Nextcloud Talk Android broadcast incorrect permission handling

Nextcould talk android is the android OS implementation of the nextcloud talk chat system. In affected versions the receiver is not protected by broadcastPermission allowing malicious apps to monitor communication. It is recommended that the Nextcloud Talk Android is upgraded to 14.1.0. There are no known workarounds for this issue.

Action-Not Available
Vendor-Nextcloud GmbH
Product-talksecurity-advisories
CWE ID-CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
CWE ID-CWE-732
Incorrect Permission Assignment for Critical Resource
Details not found