CVE-2024-48770

Summary

CVE-2024-48770 is a newly disclosed vulnerability affecting Plug n Play Camera's com.wisdomcity.zwave software version 1.1.0. This issue permits remote attackers to access sensitive data during the firmware update process, posing a significant risk to security and privacy. The vulnerability can be exploited without requiring authentication or physical access, making it an elevated threat. The exact nature of the information obtainable through this exploit is not yet clear, but it is advised that users upgrade to the latest software version as soon as it becomes available to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.