PT-2024-33139 · Unknown · Xiao He Smart

Published 2024-10-24 · Updated 2024-10-25 · CVE-2024-48540

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions XIAO HE Smart version 4.3.1

Description The issue is related to incorrect access control, allowing attackers to access sensitive information by analyzing the code and data within the APK file.

Recommendations For XIAO HE Smart version 4.3.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2024-48540

Affected Products

Xiao He Smart

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2024-48540 · Security Note
• https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.hle.china.smarthome.xiaohe/com.hle.china.smarthome.xiaohe.md · Note
• https://t.me/cvedetector/8817 · Telegram Post