Improper Authentication Vulnerability in Auto Hotspot Allows Unauthorized Connection to Mobile Hotspot

CVE-2024-20815 · MEDIUM Severity

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Improper authentication vulnerability in onCharacteristicReadRequest in Auto Hotspot prior to SMR Feb-2024 Release 1 allows adjacent attackers connect to victim's mobile hotspot without user awareness.

Learn more about our Mobile App Penetration Testing.