CVE-2024-44097 Security feature bypass in Android
Android fails to validate TLS server certificates, allowing network attackers to intercept and modify encrypted traffic via man-in-the-middle attacks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-44097?
CVE-2024-44097 is a critical vulnerability in Google Android, published on 2 Oct 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
According to the researcher: "The TLS connections are encrypted against tampering or eavesdropping. However, the application does not validate the server certificate properly while initializing the TLS connection. This allows for a network attacker to intercept the connection and read the data. The attacker could the either send the client a malicious response, or forward the (possibly modified) data to the real server."
Weakness: CWE-269
Which versions are affected by CVE-2024-44097?
It affects 4 products.
Products include Google Nest Cam \(Indoor\, Wired\) Firmware, Google Nest Cam \(Outdoor or Indoor\, Battery\) Firmware, Google Nest Cam With Floodlight Firmware, Google Nest Doorbell \(Battery\) Firmware.
How do I fix CVE-2024-44097?
No fix has been published for CVE-2024-44097 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-44097 being exploited?
There is no known exploitation of CVE-2024-44097 in the wild and no public exploit code.
Sources
Also known as GHSA-hxrw-p6mf-w8qx.