CVE-2024-48772
CVSS 3.1 Score 9.1 of 10 (high)
Details
Published Oct 11, 2024
Updated: Oct 15, 2024
CWE ID 863
Summary
CVE-2024-48772 is a newly disclosed vulnerability affecting the C-CHIP (com.cchip.cchipamaota) software version 1.2.8. This issue permits a remote attacker to extract sensitive information during the firmware update process, posing a significant risk to system security. The precise method of exploitation is not detailed, but it appears that the update process contains a flaw that can be exploited to access protected data. It is strongly recommended that users of C-CHIP software upgrade to the latest version as soon as possible to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.