#VU102462 Use of hard-coded credentials in Össur Logic - CVE-2024-45832

Vulnerability identifier: #VU102462

Vulnerability risk: Low

CVSSv4.0: 0.4 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-45832

CWE-ID: CWE-798

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Össur Logic
Mobile applications / Apps for mobile phones

Vendor: Össur

Description

The vulnerability allows a local attacker to compromise the target system.

The vulnerability exists due to presence of hard-coded credentials in application code. An attacker with physical access can access the affected system and gain access unauthorized information.

Mitigation
Install updates from vendor's website.

Vulnerable software versions

Össur Logic: before 1.5.5

---

External links
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-354-01

---

Q & A

Can this vulnerability be exploited remotely?

No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.