CVE-2024-54681
Ossur Mobile Logic Application Command Injection
- State
- Published
- Severity
- 2.0 Low
- Published
- Jan 17, 2025
- Updated
- Jan 21, 2025
- Reserved
- Dec 17, 2024
Description
Multiple bash files were present in the application's private directory. Bash files can be used on their own, by an attacker that has already full access to the mobile platform to compromise the translations for the application.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 2.0 Low | CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N | icscert |
| 3.1 | 3.5 Low | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L | icscert |
Weaknesses
- CWE-77 Command Injection
Affected Products
| Product | Versions |
|---|---|
Mobile Logic ApplicationOssur |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.