What is CVE-2024-53701?

CVE-2024-53701 is a low-severity vulnerability in Fcnt Llc Arrows N F-51c, classified under Missing Authentication for Critical Function. CVSS score: 3.1/10. Published 2024-11-29.

How severe is CVE-2024-53701?

Low severity. CVSS v3 base score is 3.1 out of 10.

Auth bypass in Fcnt Llc Arrows N F-51c

CVE-2024-53701

Multiple FCNT Android devices provide the original security features such as "privacy mode" where arbitrary applications can be set not to be displayed, etc. Under certain conditions, and when an attacker can directly operate the device which its screen is unlocked by a user, the provided security features' setting pages may be exposed and/or the settings may be altered, without authentication. For example, specific applications in the device configured to be hidden may be displayed and/or activated.

Vulnerability class: Broken Authentication

EPSS: 0.002 (10.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.1 (Low). Vector: CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N.

Affected products

Fcnt Llc Arrows N F-51c — versions prior to build number V51R057C
Fcnt Llc Arrows We — versions prior to build number V71RS50A
Fcnt Llc Arrows We F-51b — versions prior to build number V70RD50A
Fcnt Llc Arrows We Fcg01 — versions prior to build number V68RK50A

Weakness classification (CWE)

CWE-306 — Missing Authentication for Critical Function

References

Frequently asked questions

What is CVE-2024-53701?: CVE-2024-53701 is a low-severity vulnerability in Fcnt Llc Arrows N F-51c, classified under Missing Authentication for Critical Function. CVSS score: 3.1/10. Published 2024-11-29.
How severe is CVE-2024-53701?: Low severity. CVSS v3 base score is 3.1 out of 10.