CVEvulnerability

CVE-2024-48538

9.8 CRITICAL Published 2024-10-24 Modified 2026-07-05 Official page ↗

Status: Deferred
Published: 2024-10-24
Last modified: 2026-07-05
Assigner: [email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-862

Description

Incorrect access control in the firmware update and download processes of Neye3C v4.5.2.0 allows attackers to access sensitive information by analyzing the code and data within the APK file.

Weakness · CWE (1)

CWE-862 Missing Authorization weakness

References

http://www.netdvr.cn/page6 www.netdvr.cn
https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.gooclient.anycam.neye3ctwo/com.gooclient.anycam.neye3ctwo.md github.com

CVE-2024-48538

Description

Related

Weakness · CWE (1)

References