{"id":"CVE-2024-45832","aliases":["EUVD-2024-41278","GHSA-jc7c-qjrv-g424"],"status":"published","title":"Ossur Mobile Logic Application Use of Hard-coded Credentials","description":"Hard-coded credentials were included as part of the application binary. \nThese credentials served as part of the application authentication flow \nand communication with the mobile application. An attacker could access \nunauthorized information.","severity":{"version":"4.0","score":2,"vector":"CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:H/SA:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00298,"percentile":0.22686,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-798"],"published":"2025-01-17T16:49:56Z","modified":"2026-06-17T07:54:53Z","products":[{"vendor":"ossur","product":"mobile logic application"}],"references":[{"url":"https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-354-01"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-45832"},{"url":"https://github.com/advisories/GHSA-jc7c-qjrv-g424"}],"sources":{"cve":[{"id":"CVE-2024-45832","title":"Ossur Mobile Logic Application Use of Hard-coded Credentials","description":"Hard-coded credentials were included as part of the application binary. \nThese credentials served as part of the application authentication flow \nand communication with the mobile application. An attacker could access \nunauthorized information.","status":"published","published":"2025-01-17T16:49:56.088Z","modified":"2025-01-17T17:59:26.276Z","cvss":[{"version":"4.0","score":2,"vector":"CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:H/SA:N","level":"low","assessor":"cna"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T14:34:08.500935Z"}],"euvd":[{"id":"EUVD-2024-41278","description":"Hard-coded credentials were included as part of the application binary. \nThese credentials served as part of the application authentication flow \nand communication with the mobile application. An attacker could access \nunauthorized information.","status":"published","published":"2025-01-17T16:49:56Z","modified":"2025-01-17T17:59:26Z","cvss":[{"version":"4.0","score":2,"vector":"CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:H/SA:N","level":"low"}],"updated_at":"2026-11-03T00:04:16.564106Z"}],"ghsa":[{"id":"GHSA-jc7c-qjrv-g424","title":"Hard-coded credentials were included as part of the application binary. \nThese credentials served...","description":"Hard-coded credentials were included as part of the application binary. \nThese credentials served as part of the application authentication flow \nand communication with the mobile application. An attacker could access \nunauthorized information.","status":"published","published":"2025-01-17T18:31:14Z","modified":"2025-01-17T18:31:22Z","cvss":[{"version":"4.0","score":2,"vector":"CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T14:59:35.754921Z"}],"nvd":[{"id":"CVE-2024-45832","description":"Hard-coded credentials were included as part of the application binary. \nThese credentials served as part of the application authentication flow \nand communication with the mobile application. An attacker could access \nunauthorized information.","status":"published","published":"2025-01-17T17:15:11.87Z","modified":"2026-06-17T07:54:53.9Z","cvss":[{"version":"4.0","score":2,"vector":"CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low","assessor":"secondary"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T14:10:42.895329Z"}]}}