CVE-2024-48795
MEDIUMCreative Labs Pte Ltd com.creative.apps.xficonnect <2.00.02 - Info ...
Title source: llmDescription
An issue in Creative Labs Pte Ltd com.creative.apps.xficonnect 2.00.02 allows a remote attacker to obtain sensitive information via the firmware update process.
References (2)
Core 2
Core References
Various Sources
https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.creative.apps.xficonnect/com.creative.apps.xficonnect.md
Various Sources
https://hk.creative.com/
Scores
CVSS v3
5.3
EPSS
0.0172
EPSS Percentile
82.5%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
Status
published
Published
Oct 14, 2024
Tracked Since
Feb 18, 2026