CVE Catalog
CVE-2024-48778
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk0.44%
36th percentile - higher than 36% of all known CVEs
Summary
A vulnerability in the RideLink application by GIANT MANUFACTURING CO., LTD (version 2.0.7) allows a remote attacker to obtain sensitive information through the firmware update process.
Risk Assessment
The organization is at risk of sensitive data leakage, which could be used for further attacks or identity theft of users.
Recommendation
Immediately update the RideLink application to the latest available version and monitor network traffic during update processes.
Original NVD description (English source)
An issue in GIANT MANUFACTURING CO., LTD RideLink (tw.giant.ridelink) 2.0.7 allows a remote attacker to obtain sensitive information via the firmware update process.