PT-2024-33140

CVE-2024-48541

·

Published

2024-10-24

·

Updated

2024-10-25

Description by

CVSS 3.1
8.4
High
MetricsAV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Ruochan Smart version 4.4.7
Description The issue concerns incorrect access control in the firmware update and download processes, allowing attackers to access sensitive information by analyzing the code and data within the APK file.
Recommendations For Ruochan Smart version 4.4.7, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Weakness enumeration
CWE-863: Incorrect Authorization
Related identifiers
CVE-2024-48541
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com