CVE-2024-48773
Missing Authentication for Critical Function (CWE-306)
Published: Oct 11, 2024 / Updated: 39d ago
010
CVSS 7.5EPSS 0.05%High
CVE info copied to clipboard
An issue in WoFit v.7.2.3 allows a remote attacker to obtain sensitive information via the firmware update process
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Timeline
CVE Assignment
NVD published the first details for CVE-2024-48773
Oct 11, 2024 at 8:15 PM
First Article
Feedly found the first article mentioning CVE-2024-48773. See article
Oct 11, 2024 at 8:23 PM / VulDB Recent Entries
CVSS Estimate
Feedly estimated the CVSS score as MEDIUM
Oct 11, 2024 at 8:24 PM
EPSS
EPSS Score was set to: 0.05% (Percentile: 16.4%)
Oct 12, 2024 at 10:02 AM
CVSS
A CVSS base score of 7.5 has been assigned.
Oct 15, 2024 at 8:40 PM / nvd
Attack Patterns
CAPEC-12: Choosing Message Identifier
+null more
News
CVE-2024-48773
High Severity Description An issue in WoFit v.7.2.3 allows a remote attacker to obtain sensitive information via the firmware update process Read more at https://www.tenable.com/cve/CVE-2024-48773
NA - CVE-2024-48773 - An issue in WoFit v.7.2.3 allows a remote...
An issue in WoFit v.7.2.3 allows a remote attacker to obtain sensitive information via the firmware update process
CVE-2024-48773
An issue in WoFit v.7.2.3 allows a remote attacker to obtain sensitive information via the firmware update...
CVE-2024-48773 - WoFit Information Disclosure
CVE ID : CVE-2024-48773 Published : Oct. 11, 2024, 8:15 p.m. 17 minutes ago Description : An issue in WoFit v.7.2.3 allows a remote attacker to obtain sensitive information via the firmware update process Severity: 0.0 NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2024-48773
An issue in WoFit v.7.2.3 allows a remote attacker to obtain sensitive information via the firmware update process
See 2 more articles and social media posts