CVE-2024-40240
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
An incorrect access control issue in the HomeServe Home Repair Android app version 3.3.4 allows a physically proximate attacker to escalate privileges via the fingerprint authentication function.
Risk Assessment
An attacker with physical access to the device can bypass biometric security and gain unauthorized access to sensitive app features, potentially leading to data breaches or unauthorized actions.
Recommendation
Immediately update the HomeServe Home Repair app to the latest available version that fixes this vulnerability. Until updated, disable fingerprint authentication in the app.
Original NVD description (English source)
An incorrect access control issue in HomeServe Home Repair' android app - 3.3.4 allows a physically proximate attacker to escalate privileges via the fingerprint authentication function.