CVE-2024-3108 Vulnerability Details

Record summary

CVE-2024-3108 has a selected CVSS score of 5.5 (medium).

Description

An implicit intent vulnerability was reported for Motorola’s Time Weather Widget application that could allow a local application to acquire the location of the device without authorization.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone

AutomatableNo

Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated May 3, 2024 · Source: CVE List

Affected products and versions

Product	Source	Version range	Status
Phones Browse Motorola / Phones Default status: unaffected	CVE List	Before 2023-12-01	affected

References

en-us.support.motorola.com

https://en-us.support.motorola.com/app/answers/detail/a_id/178863

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2024-3108