CVE-2024-48777

Missing Authentication for Critical Function (CWE-306)

Published: Oct 11, 2024 / Updated: 39d ago

010
CVSS 7.5EPSS 0.05%High
CVE info copied to clipboard

LEDVANCE com.ledvance.smartplus.eu 2.1.10 allows a remote attacker to obtain sensitive information via the firmware update process.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Timeline

CVE Assignment

NVD published the first details for CVE-2024-48777

Oct 11, 2024 at 8:15 PM
First Article

Feedly found the first article mentioning CVE-2024-48777. See article

Oct 11, 2024 at 8:23 PM / VulDB Recent Entries
CVSS Estimate

Feedly estimated the CVSS score as MEDIUM

Oct 11, 2024 at 8:24 PM
EPSS

EPSS Score was set to: 0.05% (Percentile: 16.4%)

Oct 12, 2024 at 10:02 AM
CVSS

A CVSS base score of 7.5 has been assigned.

Oct 15, 2024 at 7:40 PM / nvd
Static CVE Timeline Graph

Attack Patterns

CAPEC-12: Choosing Message Identifier
+null more

CVSS V3.1

Attack Vector:Network
Attack Complexity:Low
Privileges Required:None
User Interaction:None
Scope:Unchanged
Confidentiality:High
Integrity:None
Availability Impact:None

Categories

Be the first to know about critical vulnerabilities

Collect, analyze, and share vulnerability reports faster using AI