CVE-2024-54681 — Ossur Mobile Logic Application Command Injection

CVE-2024-54681

Ossur Mobile Logic Application Command Injection PUBLISHED

Description (CNA)

Multiple bash files were present in the application's private directory. Bash files can be used on their own, by an attacker that has already full access to the mobile platform to compromise the translations for the application.

Affected (CNA)

Vendor / product	Versions
Ossur / Mobile Logic Application	affected 0 before 1.5.5

CWE

CWE-77

References

https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-354-01

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.