CVE-2024-54681CWE-77
Ossur Mobile Logic Application Command Injection
Low · published January 17, 2025
What it is
Multiple bash files were present in the application's private directory.
Bash files can be used on their own, by an attacker that has already
full access to the mobile platform to compromise the translations for
the application.
The record
Technical detail
- CVSS v4.0
- 2.0 · LOW
- Vector
- CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
- EPSS
- 0.00291 · 20.5th percentile
- Weakness
- CWE-77 · Improper Neutralization of Special Elements used in a Command ('Command Injection')
- Published
- 2025-01-17T16:46Z
EPSS history
Timeline