An issue in almaodo GmbH appinventor.ai_google.almando_control 2.3.1 allows a remote attacker to obtain sensitive information via the firmware update process
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Tue, 15 Oct 2024 21:15:00 +0000

Type Values Removed Values Added
First Time appeared Almando
Almando almando Control Firmware
Weaknesses CWE-306
CPEs cpe:2.3:o:almando:almando_control_firmware:*:*:*:*:*:*:*:*
Vendors & Products Almando
Almando almando Control Firmware
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Fri, 11 Oct 2024 19:30:00 +0000

Type Values Removed Values Added
Description An issue in almaodo GmbH appinventor.ai_google.almando_control 2.3.1 allows a remote attacker to obtain sensitive information via the firmware update process
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-10-15T20:20:29.734Z

Reserved: 2024-10-08T00:00:00

Link: CVE-2024-48768

cve-icon Vulnrichment

Updated: 2024-10-15T20:14:38.990Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-10-11T20:15:05.253

Modified: 2024-10-15T21:35:32.950

Link: CVE-2024-48768

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.