CVE-2024-48770

An issue in Plug n Play Camera com.wisdomcity.zwave 1.1.0 allows a remote attacker to obtain sensitive information via the firmware update process...

SAMPMAX com.sampmax.homemax 安全漏洞

SAMPMAX com.sampmax.homemax is a firmware program from SAMPMAX Corporation. A security vulnerability exists in SAMPMAX com.sampmax.homemax version 2.1.2.7, which stems from contains a vulnerability that allows remote attackers to obtain sensitive information through the firmware update process...

CVE-2024-48776

An issue in Shelly com.home.shelly 1.0.4 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48777

The CVE-2024-48777 entry concerns LEDVANCE com.ledvance.smartplus.eu version 2.1.10. The issue reportedly allows a remote attacker to obtain sensitive information via the firmware update process. Connected sources confirm the affected product/version and indicate remediation guidance: upgrade to ...

CVE-2024-48776

An issue in Shelly com.home.shelly 1.0.4 allows a remote attacker to obtain sensitive information via the firmware update process...

PT-2024-33220 · Switchbot · Switchbot

Name of the Vulnerable Software and Affected Versions: SwitchBot version 5.0.4 Description: The issue allows a remote attacker to obtain sensitive information via the firmware update process. Recommendations: For version 5.0.4, at the moment, there is no information about a newer version that...

PT-2024-33211 · Unknown · Plug N Play Camera

Name of the Vulnerable Software and Affected Versions: Plug n Play Camera com.ezset.delaney version 1.2.0 Description: The issue allows a remote attacker to obtain sensitive information via the firmware update process. Recommendations: For version 1.2.0, update the firmware to a version that...

PT-2024-33212 · Allterco · Shelly

Name of the Vulnerable Software and Affected Versions: Shelly com.home.shelly version 1.0.4 Description: The issue allows a remote attacker to obtain sensitive information via the firmware update process. Recommendations: For version 1.0.4, at the moment, there is no information about a newer...

Shelly com.home.shelly 安全漏洞

Shelly com.home.shelly is a firmware program from Shelly, Inc. A security vulnerability exists in Shelly com.home.shelly version 1.0.4, which stems from a contained vulnerability that allows remote attackers to obtain sensitive information through the firmware update process...

CVE-2024-48768

CVE-2024-48768 affects almaodo GmbH appinventor.ai_google.almando_control version 2.3.1. The issue allows a remote attacker to obtain sensitive information via the firmware update process. Affected component is the firmware update flow; root cause and exact exploit path are not detailed in the pr...

PT-2024-8355 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10 version 16.03.10.13 Description: A critical vulnerability was found in the function FUN 0044db3c of the file /goform/fast setting wifi set. The manipulation of the argument timeZone leads to a stack-based buffer overflow. The attac...

CVE-2024-48788

CVE-2024-48788 affects YESCAM (com.yescom.YesCam.zwave) 1.0.2. A flaw in the firmware update process may allow a remote attacker to obtain sensitive information and, per PT-2024-33222, could enable arbitrary code execution with admin privileges. No fix for 1.0.2 is publicly documented in the conn...

Wo-smart WoFit 安全漏洞

Wo-smart WoFit is an application from Wo-smart that provides data logging, tracking, and statistics for users' health and exercise fitness activities. A security vulnerability exists in Wo-smart WoFit version v.7.2.3, which stems from an issue that allows remote attackers to obtain sensitive...

CVE-2024-48775

CVE-2024-48775 affects Plug n Play Camera com.ezset.delaney 1.2.0. The issue, triggered during the firmware update process, may allow a remote attacker over the network to obtain sensitive information (confidentiality impact High; no integrity/availability impact reported). The vulnerability is d...

CVE-2024-48771

An issue in almando GmbH Almando Play APP com.almando.play 1.8.2 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48777

LEDVANCE com.ledvance.smartplus.eu 2.1.10 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48786

An issue in SWITCHBOT INC SwitchBot com.theswitchbot.switchbot 5.0.4 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48777

LEDVANCE com.ledvance.smartplus.eu 2.1.10 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48773

An issue in WoFit v.7.2.3 allows a remote attacker to obtain sensitive information via the firmware update process...

BURG-WCHTER KG de.burgwachter.keyapp.app 安全漏洞

BURG-WCHTER KG de.burgwachter.keyapp.app is a firmware program from BURG-WCHTER KG. A security vulnerability exists in BURG-WCHTER KG de.burgwachter.keyapp.app version 4.5.0, which originated from a problem, that could allow a remote attacker to obtain sensitive information through the firmware...