CVE-2024-3109
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-3109
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A hard-coded AES key vulnerability was reported in the Motorola GuideMe application, along with a lack of URI sanitation, could allow for a local attacker to read arbitrary files.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
使用硬编码的密码学密钥
Source: NVD (National Vulnerability Database)
Vulnerability Title
Motorola GuideMe 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Motorola GuideMe是美国摩托罗拉（Motorola）公司的一款应用程序。 Motorola GuideMe 存在安全漏洞，该漏洞源于存在硬编码AES密钥漏洞，可能允许本地攻击者读取任意文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2024-3109
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-3109
请登录查看更多情报信息。
Same Patch Batch · Motorola · 2024-05-03 · 17 CVEs total
| CVE-2023-41830 | 6.5 MEDIUM | Motorola Ready For 安全漏洞 |
| CVE-2023-41819 | 6.1 MEDIUM | Motorola Face Unlock 安全漏洞 |
| CVE-2024-3108 | 5.5 MEDIUM | Motorola Time Weather Widget 安全漏洞 |
| CVE-2023-41826 | 5.1 MEDIUM | Motorola Device Help 安全漏洞 |
| CVE-2023-41816 | 5.0 MEDIUM | Motorola Services Main 安全漏洞 |
| CVE-2023-41820 | 5.0 MEDIUM | Motorola Ready For 安全漏洞 |
| CVE-2023-41821 | 5.0 MEDIUM | Motorola Setup 安全漏洞 |
| CVE-2023-41818 | 5.0 MEDIUM | Motorola Device Help 安全漏洞 |
| CVE-2023-41822 | 4.8 MEDIUM | Motorola Interface Test Tool 安全漏洞 |
| CVE-2023-41823 | 4.4 MEDIUM | Motorola Phone Extension 安全漏洞 |
| CVE-2023-41828 | 4.4 MEDIUM | Motorola Phone 安全漏洞 |
| CVE-2024-3479 | 2.8 LOW | Motorola Enterprise MotoDpms Provider 安全漏洞 |
| CVE-2024-3480 | 2.8 LOW | Motorola Framework 安全漏洞 |
| CVE-2023-41825 | 2.8 LOW | Motorola Ready For 安全漏洞 |
| CVE-2023-41817 | 2.8 LOW | Motorola Phone Calls 安全漏洞 |
| CVE-2023-41824 | 2.8 LOW | Motorola Phone Calls 安全漏洞 |
IV. Related Vulnerabilities
Same weakness: CWE-321
- CVE-2026-8243
Industrial Application Software IAS Canias ERP JNLP Deployme - CVE-2026-6787
Usage of a hard-coded cryptographic key in WatchGuard Agent - CVE-2026-42518
Information Disclosure Vulnerability in e-Sushrut HMIS - CVE-2026-7306
Xuxueli xxl-job OpenAPI Endpoint OpenApiController.java hard - CVE-2026-32644
Milesight Cameras Use of Hard-coded Cryptographic Key
V. Comments for CVE-2024-3109
No comments yet