VULNERABILITY INTELLIGENCE

CVE-2024-40240

CVSS score6.8 MEDIUM
EPSS probability0.26%
CISA KEVNot currently listed
Published2024-11-08
Last modified2026-07-05
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An incorrect access control issue in HomeServe Home Repair' android app - 3.3.4 allows a physically proximate attacker to escalate privileges via the fingerprint authentication function.

Weakness classification

  • nvd@nist.gov: NVD-CWE-Other

Primary references