PT-2025-3064 · Byd · Dilink Os

Published 2025-01-27 · Updated 2025-08-09 · CVE-2024-54728

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions BYD QIN PLUS DM-i Dilink OS version 3.0 13.1.7.2204050.1

Description The issue is related to incorrect access control, allowing unauthorized attackers to access system logcat logs. This could potentially expose sensitive information.

Recommendations For BYD QIN PLUS DM-i Dilink OS version 3.0 13.1.7.2204050.1, consider restricting access to system logcat logs until a patch is available. As a temporary workaround, limiting the access to logcat logs can help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Open Redirect

Insecure Storage of Sensitive Information

Weakness Enumeration

CWE-601

CWE-922

Related Identifiers

CVE-2024-54728

Affected Products

Dilink Os

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-54728 · Security Note
• https://t.me/cvedetector/16551 · Telegram Post
• https://t.me/CVEtracker/29582 · Telegram Post
• https://t.me/cvenotify/108794 · Telegram Post
• https://t.me/cveNotify/131552 · Telegram Post
• https://gist.github.com/rainymode/00dacd7bfede713a0f052a531da4fabd · Note
• https://twitter.com/CVEnew/status/1884183345913024678 · Twitter Post
• https://gist.github.com/xu-yanbo202000460009/00dacd7bfede713a0f052a531da4fabd · Note