CVE-2024-34643

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Improper access control in key input related function in Dressroom prior to SMR Sep-2024 Release 1 allows local attackers to access protected data. User interaction is required for triggering this vulnerability.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Sep 4, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-346445.5Improper access control in item selection related in Dressroom prior to SMR Sep-2024 Release 1 allows local attackers to access protected daCVE-2024-346454.6Improper input validation in ThemeCenter prior to SMR Sep-2024 Release 1 allows physical attackers to install privileged applications.CVE-2024-346465.5Improper access control in DualDarManagerProxy prior to SMR Sep-2024 Release 1 allows local attackers to cause local permanent denial of serCVE-2024-346475.5Incorrect use of privileged API in DualDarManagerProxy prior to SMR Sep-2024 Release 1 allows local attackers to access privileged APIs relaCVE-2024-346485.5Improper Handling of Insufficient Permissions in KnoxMiscPolicy prior to SMR Sep-2024 Release 1 allows local attackers to access sensitive dCVE-2024-346492.4Improper access control in new Dex Mode in multitasking framework prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily aCVE-2024-34659.8A vulnerability was found in SourceCodester Laundry Management System 1.0. It has been classified as critical. Affected is the function lapoCVE-2024-346503.3Incorrect authorization in CocktailbarService prior to SMR Sep-2024 Release 1 allows local attackers to access privileged APIs related to EdCVE-2024-346515.5Improper authorization in My Files prior to SMR Sep-2024 Release 1 allows local attackers to access restricted data in My Files.CVE-2024-346523.3Incorrect authorization in kperfmon prior to SMR Sep-2024 Release 1 allows local attackers to access information related to performance inclCVE-2024-346534.6Path Traversal in My Files prior to SMR Sep-2024 Release 1 allows physical attackers to access directories with My Files' privilege.CVE-2024-346545.5Improper Export of android application component in My Files prior to SMR Sep-2024 Release 1 allows local attackers to access files with My
CVE-2024-34643: Medium severity, CVSS 5.5 | Vulnix