CVE-2024-54681
Multiple bash files were present in the application's private directory. Bash files can be used on their own, by an attacker that has already full access to the mobile platform to compromise the translations for the application.
These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
Multiple bash files were present in the application's private directory. Bash files can be used on their own, by an attacker that has already full access to the mobile platform to compromise the translations for the application.
A medium-severity vulnerability in the Ă–ssur Logic Mobile Application (versions prior to 1.5.5) exposes hardcoded credentials and a static authentication token within decompiled application code. An attacker with local access and elevated privileges could leverage these artifacts to modify translation files, undermining application integrity and disrupting normal medical device operation. The vulnerabilit [truncated]
CVE-2024-45832 is a medium-severity vulnerability (CVSS 4.3) in the Ossur Logic Mobile Application, published by CISA on December 19, 2024. The issue involves hard-coded credentials embedded within the application binary, which were used as part of the authentication flow and communication with the mobile application. An attacker with physical access to the device could potentially extract these credentia [truncated]