PT-2024-29469 · Himalaya · Himalaya Xiaoya Nano Smart Speaker

Published 2024-07-29 · Updated 2024-12-05 · CVE-2024-41624

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Himalaya Xiaoya nano smart speaker version 1.6.96

Description The issue is related to incorrect access control, allowing a remote attacker to have an unspecified impact.

Recommendations For version 1.6.96, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2024-41624

Affected Products

Himalaya Xiaoya Nano Smart Speaker

References · 3

• 🔥 https://github.com/x1ngg3/cve/tree/main/CVE-2024-41624 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-41624 · Security Note
• http://himalaya.com · Note