CVE-2024-48544 - Incorrect access control in the firmware update and download processes of Sylvania Smart Home v3.0.3 allows attackers to access sensitive information by analyzing the code and data within the APK file

Back Back to CVE browser

HIGH

Incorrect access control in the firmware update and download processes of Sylvania Smart Home v3.0.3 allows attackers to access sensitive information by analyzing the code and data within the APK file

Published Oct 24, 2024

8.4

HIGH

CVSS 3.1

EPSS 0.20%

Description

Incorrect access control in the firmware update and download processes of Sylvania Smart Home v3.0.3 allows attackers to access sensitive information by analyzing the code and data within the APK file.

Affected products

Vendor Ledvance Product Sylvania Smart Home Firmware Default
unknown
Affected
- 3.0.3

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Ledvance	Sylvania Smart Home Firmware	unknown	Affected 3.0.3

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-863

Incorrect Authorization

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-43029		Advisory
https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.ledvance.smartplus/com.ledvance.smartplus.md

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 24, 2024

Updated Jul 5, 2026

Reserved Oct 8, 2024

Link CVE-2024-48544

CISA Vulnrichment

Updated Oct 24, 2024

NVD

Status Deferred

Modified Jul 5, 2026

Link CVE-2024-48544

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Oct 24, 2024

Updated Jul 5, 2026

Link EUVD-2024-43029

GitHub

No data