CVE-2024-54681lowCWE-77

CVE-2024-54681: low-severity vulnerability in Ossur Mobile Logic Application

Ossur Mobile Logic Application Command Injection

Published · Updated

Follow this CVE+ Monitor Mobile Logic Application

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 2epss 0.3%
Multiple bash files were present in the application's private directory. Bash files can be used on their own, by an attacker that has already full access to the mobile platform to compromise the translations for the application.
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Affected products
Ossur · Mobile Logic Application
Related CVEs — Ossur Mobile Logic Application

In the same product, most dangerous first.

CVE-2024-45832LOWOssur Mobile Logic Application Use of Hard-coded CredentialsEPSS 0.3%CVE-2024-53683MEDIUMOssur Mobile Logic Application Exposure of Sensitive System Information to an Unauthorized Control SphereEPSS 0.2%