CVE-2024-48974

Summary

CVE-2024-48974 refers to a vulnerability in certain ventilator devices. The issue lies in the lack of adequate file integrity checks during the adoption of firmware updates. An attacker can exploit this vulnerability by introducing unauthorized changes to the device's configuration settings or pushing a compromised firmware file. Consequences may include device dysfunction and unauthorized information disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.