CVE-2024-48542

CVE-2024-48542 affects Yamaha Headphones Controller, version 1.6.7. According to the connected sources, the root cause is incorrect access control in the firmware update and download processes, which enables attackers to access sensitive information by inspecting the APK’s code and data. Impact i...

CVE-2024-48546

Incorrect access control in the firmware update and download processes of Wear Sync v1.2.0 allows attackers to access sensitive information by analyzing the code and data within the APK file...

CVE-2024-48541

CVE-2024-48541 affects Ruochan Smart v4.4.7. The issue is an incorrect access control in the firmware update and firmware download processes, enabling an attacker to access sensitive information by inspecting code and data inside the APK. Impacts are described as high confidentiality and integrit...

CVE-2024-48545

Incorrect access control in the firmware update and download processes of IVY Smart v4.5.0 allows attackers to access sensitive information by analyzing the code and data within the APK file...

PT-2024-33137 · Neye3C · Neye3C

Name of the Vulnerable Software and Affected Versions: Neye3C version 4.5.2.0 Description: The issue concerns incorrect access control in the firmware update and download processes, allowing attackers to access sensitive information by analyzing the code and data within the APK file...

CVE-2024-48547

Incorrect access control in the firmware update and download processes of DreamCatcher Life v1.8.7 allows attackers to access sensitive information by analyzing the code and data within the APK file...

PT-2024-33144 · Wear Sync · Wear Sync

Name of the Vulnerable Software and Affected Versions: Wear Sync version 1.2.0 Description: The issue is related to incorrect access control in the firmware update and download processes. This allows attackers to access sensitive information by analyzing the code and data within the APK file...

PT-2024-33142 · Sylvania · Sylvania Smart Home

Name of the Vulnerable Software and Affected Versions: Sylvania Smart Home version 3.0.3 Description: The issue is related to incorrect access control in the firmware update and download processes, allowing attackers to access sensitive information by analyzing the code and data within the APK...

CVE-2024-48544

Incorrect access control in the firmware update and download processes of Sylvania Smart Home v3.0.3 allows attackers to access sensitive information by analyzing the code and data within the APK file...

CVE-2024-48538

Incorrect access control in the firmware update and download processes of Neye3C v4.5.2.0 allows attackers to access sensitive information by analyzing the code and data within the APK file...

CVE-2024-48546

Incorrect access control in the firmware update and download processes of Wear Sync v1.2.0 allows attackers to access sensitive information by analyzing the code and data within the APK file...

CVE-2024-48539

Neye3C v4.5.2.0 was discovered to contain a hardcoded encryption key in the firmware update mechanism...

CVE-2024-48542

Incorrect access control in the firmware update and download processes of Yamaha Headphones Controller v1.6.7 allows attackers to access sensitive information by analyzing the code and data within the APK file...

Intel 2024.3 IPU – Chipset Firmware Security Update

Intel has informed HP of potential security vulnerabilities in Intel® Converged Security and Manageability Engine CSME, Intel® Active Management Technology AMT, Intel® Standard Manageability, Intel® PROSet/Wireless and Intel® Killer™ Wi-Fi software, which might allow escalation of privilege, deni...

Neye3C 安全漏洞

Neye3C is an application from Neye3C that connects to cloud cameras and DVRs by logging into the cloud. A security vulnerability exists in Neye3C version v4.5.2.0 that stems from the inclusion of hard-coded encryption keys in the firmware update mechanism...

CVE-2024-48538

CVE-2024-48538 affects Neye3C v4.5.2.0, where incorrect access control during firmware update and download enables an attacker to access sensitive information by inspecting code/data inside the APK. Root cause is improper access control in the update/download workflow; impact is exposure of confi...

CVE-2024-48545

CVE-2024-48545 affects IVY Smart v4.5.0. The issue is improper access control in the firmware update and download workflows, enabling an attacker to access sensitive information by inspecting code/data inside the APK. Documented impact indicates high severity (CVSS v3.1: AV Local, AC Low, PR None...

CVE-2024-48547

CVE-2024-48547 affects DreamCatcher Life v1.8.7. The issue is improper access control in the firmware update and download workflows, enabling an attacker to access sensitive information by inspecting code/data inside the APK. The vulnerability is rated HIGH (CVSS v3.1: 8.4; Local access, no user ...

CVE-2024-48538

Incorrect access control in the firmware update and download processes of Neye3C v4.5.2.0 allows attackers to access sensitive information by analyzing the code and data within the APK file...

CVE-2024-48545

Incorrect access control in the firmware update and download processes of IVY Smart v4.5.0 allows attackers to access sensitive information by analyzing the code and data within the APK file...