Vulnerability · Published Jan 17, 2025 · Assigned by icscert
CVE-2024-54681Ossur Mobile Logic Application Command Injection
Low 3.5
In plain English
A low-severity command injection in Mobile Logic Application from Ossur. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).
Severity (CVSS 3.1)3.5Low
Exploit odds (30 days)0.3%top 76.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Multiple bash files were present in the application's private directory. Bash files can be used on their own, by an attacker that has already full access to the mobile platform to compromise the translations for the application.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Ossur | Mobile Logic Application | 0 – before 1.5.5 |
Weakness: CWE-77 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L