PT-2025-2803 · Unknown · Neat Board Nfc

Mindaugas Sukys · Published 2025-01-09 · Updated 2025-01-16 · CVE-2024-48806

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Neat Board NFC version 1.20240620.0015

Description: A Buffer Overflow issue exists, allowing physically proximate attackers to escalate privileges via a crafted payload to the password field. This enables local privilege escalation.

Recommendations: For Neat Board NFC version 1.20240620.0015, as a temporary workaround, consider restricting access to the password field until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

LPE

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2024-48806

Affected Products

Neat Board Nfc

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-48806 · Security Note
• https://support.neat.no/article/devices-running-microsoft-teams-allow-for-buffer-overflow-vulnerability · Note
• https://twitter.com/CVEnew/status/1877620708257444182 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1877691994861912336 · Twitter Post
• https://t.me/cvedetector/14923 · Telegram Post