PT-2024-33137 · Neye3C · Neye3C

Published 2024-10-24 · Updated 2024-10-25 · CVE-2024-48538

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Neye3C version 4.5.2.0

Description The issue concerns incorrect access control in the firmware update and download processes, allowing attackers to access sensitive information by analyzing the code and data within the APK file.

Recommendations For Neye3C version 4.5.2.0, update to a newer version that addresses the incorrect access control issue in the firmware update and download processes to prevent unauthorized access to sensitive information.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2024-48538

Affected Products

Neye3C

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-48538 · Security Note
• https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.gooclient.anycam.neye3ctwo/com.gooclient.anycam.neye3ctwo.md · Note
• https://t.me/cvedetector/8804 · Telegram Post
• http://neye3c.com · Note
• http://netdvr.cn/page6 · Note