CVE-2024-44754

MediumCVSS 6.8

Published: 28/02/2025(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

11th percentile - higher than 11% of all known CVEs

Summary

A vulnerability in Minut M2 with firmware version #15142 allows extraction of cryptographic keys from internal flash. Physically proximate attackers can inject modified firmware into any other Minut M2 product via USB.

Risk Assessment

The risk involves potential takeover of multiple Minut M2 devices through malicious firmware injection, leading to data breaches and system integrity compromise.

Recommendation

Immediately update Minut M2 firmware to the latest version and restrict physical access to the devices.

Original NVD description (English source)

Cryptographic key extraction from internal flash in Minut M2 with firmware version #15142 allows physically proximate attackers to inject modified firmware into any other Minut M2 product via USB.