CVE-2024-48784 - An Incorrect Access Control issue in SAMPMAX com.sampmax.homemax 2.1.2.7 allows a remote attacker to obtain sensitive information via the firmware update process

Back Back to CVE browser

CRITICAL

An Incorrect Access Control issue in SAMPMAX com.sampmax.homemax 2.1.2.7 allows a remote attacker to obtain sensitive information via the firmware update process

Published Oct 11, 2024

9.8

CRITICAL

CVSS 3.1

EPSS 0.52%

Description

An Incorrect Access Control issue in SAMPMAX com.sampmax.homemax 2.1.2.7 allows a remote attacker to obtain sensitive information via the firmware update process.

Affected products

Vendor Sampmax Product Sampmax Firmware Default
n/a
- Version
  2.1.2.7
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Sampmax

Sampmax Firmware

n/a

Version	Status	Constraints
2.1.2.7	affected	-

Remediation

No remediation recorded yet.

Metrics

0.52% 0.00515

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 4, 2026.

EPSS probability 0.00515

Score over time

2024-2026

EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v3
EPSS v4
EPSS v5

Table of values (5 key points)

Flat stretches are collapsed. Showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 4, 2026	0.52% (0.00515)	41.82th	v5 (v2026.06.15)
Jun 15, 2026	0.60% (0.00601)	43.88th	v5 (v2026.06.15)
Mar 17, 2025	0.27% (0.00267)	48.14th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00045)	17.70th	v3 (v2023.03.01)
Oct 12, 2024	0.04% (0.00045)	16.43th	v3 (v2023.03.01)