CVE-2024-48546

HIGH

Wear Sync 1.2.0 - Incorrect Authorization in Firmware Update and Download

Title source: llm
STIX 2.1

Description

Incorrect access control in the firmware update and download processes of Wear Sync v1.2.0 allows attackers to access sensitive information by analyzing the code and data within the APK file.

References (2)

Core 2

Scores

CVSS v3 8.4
EPSS 0.0020
EPSS Percentile 10.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-863
Status published
Published Oct 24, 2024
Tracked Since Feb 18, 2026