CVE Vulnerabilities

CVE-2019-20469

Insecure Storage of Sensitive Information

Published: Nov 07, 2024 | Modified: Nov 08, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

An issue was discovered on One2Track 2019-12-08 devices. Confidential information is needlessly stored on the smartwatch. Audio files are stored in .amr format, in the audior directory. An attacker who has physical access can retrieve all audio files by connecting via a USB cable.

Weakness

The product stores sensitive information without properly limiting read or write access by unauthorized actors.

References