What’s Vulnerable › Vulnerabilities
CVE-2024-45832: Ossur Mobile Logic Application Use of Hard-coded Credentials
- Severity: medium (CVSS 4.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-01-17 · updated 2026-06-17
- Weakness: CWE-798
Description
Hard-coded credentials were included as part of the application binary. These credentials served as part of the application authentication flow and communication with the mobile application. An attacker could access unauthorized information.
Affected products
- Ossur Mobile Logic Application: before 1.5.5 — fixed in 1.5.5
How to fix
Upgrade to a fixed version: Ossur Mobile Logic Application 1.5.5. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2024-45832 or the next vulnerability affects your stack