CVEvulnerability
CVE-2019-20469
4.6 MEDIUM
Official page ↗
- Status
- Deferred
- Published
- 2024-11-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 4.6 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-922
Description
An issue was discovered on One2Track 2019-12-08 devices. Confidential information is needlessly stored on the smartwatch. Audio files are stored in .amr format, in the audior directory. An attacker who has physical access can retrieve all audio files by connecting via a USB cable.
Related
Weakness · CWE (1)
- CWE-922 Insecure Storage of Sensitive Information weakness
References
- https://seclists.org/fulldisclosure/2024/Jul/14 seclists.org
- https://www.one2track.nl www.one2track.nl
- http://seclists.org/fulldisclosure/2024/Jul/14 seclists.org