CVE-2024-48784

An Incorrect Access Control issue in SAMPMAX com.sampmax.homemax 2.1.2.7 allows a remote attacker to obtain sensitive information via the firmware update process.

Score

CVSS 3.1 9.8 Critical

Status

Deferred - cve@mitre.org

Published

2024-10-11

Last modified

2026-07-05

Weaknesses

CWE-863

Affected products

• Sampmax Firmware (Sampmax)

References

• https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.sampmax.homemax/com.sampmax.homemax.md