CVE-2024-40240: Homeserve

Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days.

An incorrect access control issue in HomeServe Home Repair' android app - 3.3.4 allows a physically proximate attacker to escalate privileges via the fingerprint authentication function.

Affected products

• Homeserve Homeserve: version 3.3.4 only

Published 2024-11-08. Last modified 2026-07-05.