« Volver al listado

CVE-2024-5163

Estado: AplazadaCrítica (9.8)—

Improper permission settings for mobile applications (com.transsion.carlcare) may lead to user password and account security risks.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Transsion — CarlcareAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-5163",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-5163",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-06-18T13:48:34.000016Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "907edf6c-bf03-423e-ab1a-8da27e1aa1ea",
      "affectedData": [
        {
          "vendor": "TECNO",
          "product": "com.transsion.carlcare",
          "versions": [
            {
              "status": "affected",
              "version": "5.8.1.4"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:tecno:com.transsion.carlcare:-:*:*:*:*:*:*:*"
          ],
          "vendor": "tecno",
          "product": "com.transsion.carlcare",
          "versions": [
            {
              "status": "affected",
              "version": "5.8.1.4"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-06-17T03:15:09.057",
  "references": [
    {
      "url": "https://security.tecno.com/SRC/blogdetail/267?lang=en_US",
      "source": "907edf6c-bf03-423e-ab1a-8da27e1aa1ea"
    },
    {
      "url": "https://security.tecno.com/SRC/securityUpdates?type=SA",
      "source": "907edf6c-bf03-423e-ab1a-8da27e1aa1ea"
    },
    {
      "url": "https://security.tecno.com/SRC/blogdetail/267?lang=en_US",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://security.tecno.com/SRC/securityUpdates",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "907edf6c-bf03-423e-ab1a-8da27e1aa1ea",
      "description": [
        {
          "lang": "en",
          "value": "CWE-732"
        }
      ]
    },
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-280"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper permission settings for mobile applications (com.transsion.carlcare) may lead to user password and account security risks."
    },
    {
      "lang": "es",
      "value": "La configuración incorrecta de permisos para aplicaciones móviles (com.transsion.carlcare) puede provocar riesgos de seguridad de la cuenta y la contraseña del usuario."
    }
  ],
  "lastModified": "2026-06-17T08:15:19.567",
  "sourceIdentifier": "907edf6c-bf03-423e-ab1a-8da27e1aa1ea"
}