CVE-2024-1662CWE-306CWE-862

Information Disclosure in Porty's PowerBank

High · published June 5, 2024

CVSS v3.1
7.5
EPSS
0%
Percentile
34.1
In the wild
Unconfirmed
What it is

Missing Authentication for Critical Function, Missing Authorization vulnerability in PORTY Smart Tech Technology Joint Stock Company PowerBank Application allows Retrieve Embedded Sensitive Data.

This issue affects PowerBank Application: before 2.02.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00410 · 34.1th percentile
Weaknesses
CWE-306 · Missing Authentication for Critical Function; CWE-862 · Missing Authorization
Published
2024-06-05T11:51Z
EPSS history
Timeline
  • 05 JUN 11:51Z
    Information Disclosure in Porty's PowerBank
    cvelistv5