CVE-2021-24046

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-01-14 · updated 2026-06-17
Weakness: CWE-471

Description

A logic flaw in Ray-Ban® Stories device software allowed some parameters like video capture duration limit to be modified through the Facebook View application. This issue affected versions of device software before 2107460.6810.0.

Affected products

Ray-Ban Stories Rw4002 601/71 50-22 Firmware: before 2107460.6810.0 — fixed in 2107460.6810.0
Ray-Ban Stories Rw4003 65582V 48-23 Firmware: before 2107460.6810.0 — fixed in 2107460.6810.0
Ray-Ban Stories Rw4005 656013 51-20 Firmware: before 2107460.6810.0 — fixed in 2107460.6810.0
Ray-Ban Stories Rw4005 6563M3 51-20 Firmware: before 2107460.6810.0. — fixed in 2107460.6810.0.

How to fix

Upgrade to a fixed version: Ray-Ban Stories Rw4002 601/71 50-22 Firmware 2107460.6810.0; Ray-Ban Stories Rw4003 65582V 48-23 Firmware 2107460.6810.0; Ray-Ban Stories Rw4005 656013 51-20 Firmware 2107460.6810.0; Ray-Ban Stories Rw4005 6563M3 51-20 Firmware 2107460.6810.0.. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2021-24046 or the next vulnerability affects your stack