Remote Attack Can Access Sensitive Information via Firmware Update
CVE-2024-48795

5.3MEDIUM

Key Information:

Vendor

Creative Labs Pte Ltd

Vendor
CVE Published:
14 October 2024

What is CVE-2024-48795?

An issue in Creative Labs Pte Ltd com.creative.apps.xficonnect 2.00.02 allows a remote attacker to obtain sensitive information via the firmware update process.

References

https://hk.creative.com/
https://github.com/HankJames/Vul-Reports/blob/main/Firmwa...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.