CVE-2024-48771
Missing Authentication for Critical Function (CWE-306)
Published: Oct 11, 2024 / Updated: 39d ago
010
CVSS 7.5EPSS 0.04%High
CVE info copied to clipboard
An issue in almando GmbH Almando Play APP (com.almando.play) 1.8.2 allows a remote attacker to obtain sensitive information via the firmware update process
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Timeline
CVE Assignment
NVD published the first details for CVE-2024-48771
Oct 11, 2024 at 8:15 PM
First Article
Feedly found the first article mentioning CVE-2024-48771. See article
Oct 11, 2024 at 8:23 PM / VulDB Recent Entries
CVSS Estimate
Feedly estimated the CVSS score as MEDIUM
Oct 11, 2024 at 8:24 PM
EPSS
EPSS Score was set to: 0.04% (Percentile: 9.7%)
Oct 12, 2024 at 10:02 AM
CVSS
A CVSS base score of 7.5 has been assigned.
Oct 15, 2024 at 9:40 PM / nvd
Attack Patterns
CAPEC-12: Choosing Message Identifier
+null more
News
CVE-2024-48771
High Severity Description An issue in almando GmbH Almando Play APP (com.almando.play) 1.8.2 allows a remote attacker to obtain sensitive information via the firmware update process Read more at https://www.tenable.com/cve/CVE-2024-48771
NA - CVE-2024-48771 - An issue in almando GmbH Almando Play APP...
An issue in almando GmbH Almando Play APP (com.almando.play) 1.8.2 allows a remote attacker to obtain sensitive information via the firmware update process
CVE-2024-48771
An issue in almando GmbH Almando Play APP (com.almando.play) 1.8.2 allows a remote attacker to obtain sensitive information via the firmware update...
CVE-2024-48771 - Almando GmbH Almando Play APP Information Disclosure
CVE ID : CVE-2024-48771 Published : Oct. 11, 2024, 8:15 p.m. 17 minutes ago Description : An issue in almando GmbH Almando Play APP (com.almando.play) 1.8.2 allows a remote attacker to obtain sensitive information via the firmware update process Severity: 0.0 NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2024-48771
An issue in almando GmbH Almando Play APP (com.almando.play) 1.8.2 allows a remote attacker to obtain sensitive information via the firmware update process
See 2 more articles and social media posts