CVE-2024-48776
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Oct 11, 2024
Updated: Oct 15, 2024
CWE ID 306
Summary
CVE-2024-48776 is a newly disclosed vulnerability affecting the Shelly com.home.shelly firmware version 1.0.4. This issue permits a remote attacker to gain unauthorized access to sensitive information during the firmware update process. Successful exploitation may result in the leakage of confidential data, posing a significant security risk for affected devices. Users are strongly advised to update their firmware to a secure version as soon as possible to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.