CVE-2024-5163criticalCWE-280CWE-732

CVE-2024-5163: critical vulnerability in TECNO com.transsion.carlcare

Improper permission settings in com.transsion.carlcare

Published · Updated

Follow this CVE+ Monitor com.transsion.carlcare

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8epss 0.5%
Improper permission settings for mobile applications (com.transsion.carlcare) may lead to user password and account security risks.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
TECNO · com.transsion.carlcare
Related CVEs — TECNO com.transsion.carlcare

In the same product, most dangerous first.

CVE-2024-7697HIGHLogical vulnerability in com.transsion.carlcareEPSS 0.6%CVE-2025-1298CRITICALCVE-2025-1298EPSS 0.5%CVE-2025-3698HIGHCVE-2025-3698EPSS 0.4%CVE-2025-0590HIGHCVE-2025-0590EPSS 0.4%