CVE-2024-1662

Information Disclosure in Porty's PowerBank

CVSS 7.5 HIGHEPSS 0.4%CWE-306 CWE-862

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 7.5EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

05 jun 2024Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Missing Authentication for Critical Function, Missing Authorization vulnerability in PORTY Smart Tech Technology Joint Stock Company PowerBank Application allows Retrieve Embedded Sensitive Data. This issue affects PowerBank Application: before 2.02.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Productos afectados

PORTY Smart Tech Technology Joint Stock Company · PowerBank Application

Referencias

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0324 https://www.usom.gov.tr/bildirim/tr-24-0602