Smart-tab Android app installed April 2023 or earlier contains an active debug code…
Priority LOW 32CWE-489Published · Updated
Key facts
- Attack vector
- Physical
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.
Summary
Smart-tab Android app installed April 2023 or earlier contains an active debug code vulnerability. If this vulnerability is exploited, an attacker with physical access to the device may exploit the debug function to gain access to the OS functions, escalate the privilege, change the device's settings, or spoof devices in other rooms.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00261 17th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| TECHNO SUPPORT COMPANY | Smart-tab Android app | installed April 2023 or earlier | — | No fix listed | CNA |
- Smart-tab Android app VendorTECHNO SUPPORT COMPANY Affected installed April 2023 or earlier Fixed in — No fix listed CNA
CPE names CISA-ADP · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:android_app:smart_tab:*:*:*:*:*:*:*:* | — | — | — |
- cpe:2.3:a:android_app:smart_tab:*:*:*:*:*:*:*:* Versions — — ·—
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2024-41999
- 2026-10-03 Alias added: GHSA-m27q-cmfx-vgvc
References
More TECHNO SUPPORT COMPANY vulnerabilities
- TI-2024-28464 Smart-tab Android app installed April 2023 or earlier contains an issue with plaintext… CVSS 3.0LOW 2.4
Sources
- CVE-2024-41999 · CVE Program
- CVE-2024-41999 · NVD
- FIRST EPSS
- GHSA-m27q-cmfx-vgvc · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences