CVE-2024-50302: android Version not applicable in the source CPE; +6 more affected products

Affected technology

android · Version not applicable in the source CPE
google

debian linux · 11.0
debian

simatic s7-1500 tm mfp firmware · Version not applicable in the source CPE
siemens

sinec os · before 3.2 (exclusive)
siemens

linux kernel · from 3.12 (inclusive), before 4.19.324 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.286 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.230 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.172 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.117 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.61 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.8 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

linux kernel · 6.12 · update rc4
linux

linux kernel · 6.12 · update rc5
linux

linux kernel · 6.12 · update rc6
linux

Linux · 27ce405039bfe6d3f4143415c638f56a3df77dca to before e7ea60184e1e88a3c9e437b3265cbb6439aa7e26, 27ce405039bfe6d3f4143415c638f56a3df77dca to before 3f9e88f2672c4635960570ee9741778d4135ecf5, 27ce405039bfe6d3f4143415c638f56a3df77dca to before d7dc68d82ab3fcfc3f65322465da3d7031d4ab46, 27ce405039bfe6d3f4143415c638f56a3df77dca to before 05ade5d4337867929e7ef664e7ac8e0c734f1aaf, 27ce405039bfe6d3f4143415c638f56a3df77dca to before 1884ab3d22536a5c14b17c78c2ce76d1734e8b0b, 27ce405039bfe6d3f4143415c638f56a3df77dca to before 9d9f5c75c0c7f31766ec27d90f7a6ac673193191, 27ce405039bfe6d3f4143415c638f56a3df77dca to before 492015e6249fbcd42138b49de3c588d826dd9648, 27ce405039bfe6d3f4143415c638f56a3df77dca to before 177f25d1292c7e16e1199b39c85480f7f8815552, b2b6cadad699d44a8a5b2a60f3d960e00d6fb3b7, fe6c9b48ebc920ff21c10c50ab2729440c734254, 3.10.16 to before 3.11, 3.11.5 to before 3.12
Linux

Linux · 3.12
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/hid/hid-core.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality impact as high; integrity and availability impact as none. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality impact as high; integrity and availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.