What’s Vulnerable › Vulnerabilities
CVE-2024-54681: Ossur Mobile Logic Application Command Injection
- Severity: low (CVSS 3.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-01-17 · updated 2026-06-17
- Weakness: CWE-77
Description
Multiple bash files were present in the application's private directory. Bash files can be used on their own, by an attacker that has already full access to the mobile platform to compromise the translations for the application.
Affected products
- Ossur Mobile Logic Application: before 1.5.5 — fixed in 1.5.5
How to fix
Upgrade to a fixed version: Ossur Mobile Logic Application 1.5.5. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2024-54681 or the next vulnerability affects your stack