CVE-2024-48544

CVE-2024-48544 affects Sylvania Smart Home v3.0.3. The root cause is incorrect access control in the firmware update and download processes, enabling an attacker to access sensitive information by analyzing code/data inside the APK. CVSS v3.1 metrics indicate Local attack vector, No privileges re...

PT-2024-33139 · Unknown · Xiao He Smart

Name of the Vulnerable Software and Affected Versions: XIAO HE Smart version 4.3.1 Description: The issue is related to incorrect access control, allowing attackers to access sensitive information by analyzing the code and data within the APK file. Recommendations: For XIAO HE Smart version 4.3.1...

Ruochan Smart 安全漏洞

Ruochan Smart is a smart home control software from Ruochan. A security vulnerability exists in Ruochan Smart version v4.4.7, which stems from incorrect access control during firmware updates and downloads, and could allow an attacker to gain access to sensitive information by analyzing code and...

PT-2024-33143 · Ivy Smart · Ivy Smart

Name of the Vulnerable Software and Affected Versions: IVY Smart version 4.5.0 Description: The issue is related to incorrect access control in the firmware update and download processes. This allows attackers to access sensitive information by analyzing the code and data within the APK file...

CVE-2024-48540

Incorrect access control in XIAO HE Smart 4.3.1 allows attackers to access sensitive information by analyzing the code and data within the APK file...

XIAO HE Smart 安全漏洞

XIAO HE Smart is a product of XIAOHELJ XIAOHELJ. A security vulnerability exists in XIAO HE Smart version 4.3.1 that stems from incorrect access control...

CVE-2024-48548

The APK file in Cloud Smart Lock v2.0.1 has a leaked a URL that can call an API for binding physical devices. This vulnerability allows attackers to arbitrarily construct a request to use the app to bind to unknown devices by finding a valid serial number via a bruteforce attack...

CVE-2024-48541

Incorrect access control in the firmware update and download processes of Ruochan Smart v4.4.7 allows attackers to access sensitive information by analyzing the code and data within the APK file...

CVE-2024-48548

The APK file in Cloud Smart Lock v2.0.1 has a leaked a URL that can call an API for binding physical devices. This vulnerability allows attackers to arbitrarily construct a request to use the app to bind to unknown devices by finding a valid serial number via a bruteforce attack...

CVE-2024-48541

CVE-2024-48541 affects Ruochan Smart v4.4.7. The issue is an incorrect access control in the firmware update and firmware download processes, enabling an attacker to access sensitive information by inspecting code and data inside the APK. Impacts are described as high confidentiality and integrit...

CVE-2024-48545

Incorrect access control in the firmware update and download processes of IVY Smart v4.5.0 allows attackers to access sensitive information by analyzing the code and data within the APK file...

IVY Smart 安全漏洞

IVY Smart is a smart home application from Shenzhen Aiwei IOT Technology Co. A security vulnerability exists in IVY Smart version v4.5.0, which stems from incorrect access control during firmware updates and downloads...

CVE-2024-48541

Incorrect access control in the firmware update and download processes of Ruochan Smart v4.4.7 allows attackers to access sensitive information by analyzing the code and data within the APK file...

PT-2024-33142 · Sylvania · Sylvania Smart Home

Name of the Vulnerable Software and Affected Versions: Sylvania Smart Home version 3.0.3 Description: The issue is related to incorrect access control in the firmware update and download processes, allowing attackers to access sensitive information by analyzing the code and data within the APK...

PT-2024-33146 · Unknown · Cloud Smart Lock

Name of the Vulnerable Software and Affected Versions: Cloud Smart Lock version 2.0.1 Description: The issue concerns a leaked URL in the APK file that can be used to call an API for binding physical devices. This allows attackers to construct requests to bind the app to unknown devices by findin...

Sylvania Smart Home 安全漏洞

Sylvania Smart Home is a smart home control software from Sylvania. A security vulnerability exists in Sylvania Smart Home version v3.0.3, which stems from incorrect access control during firmware updates and downloads, and could allow an attacker to access sensitive information by analyzing code...

CVE-2024-48540

CVE-2024-48540 – XIAO HE Smart 4.3.1 suffers from an incorrect access control issue that allows attackers to access sensitive information by analyzing the code and data inside the APK. The issue is documented across multiple sources (NVD, Red Hat, CVE listing, CNNVD, PT-Security) with the same ro...

CVE-2024-48545

CVE-2024-48545 affects IVY Smart v4.5.0. The issue is improper access control in the firmware update and download workflows, enabling an attacker to access sensitive information by inspecting code/data inside the APK. Documented impact indicates high severity (CVSS v3.1: AV Local, AC Low, PR None...

CVE-2024-48544

Incorrect access control in the firmware update and download processes of Sylvania Smart Home v3.0.3 allows attackers to access sensitive information by analyzing the code and data within the APK file...

CVE-2024-48545

Incorrect access control in the firmware update and download processes of IVY Smart v4.5.0 allows attackers to access sensitive information by analyzing the code and data within the APK file...