CVE Catalog
CVE-2024-53614
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.54%
41th percentile - higher than 41% of all known CVEs
Summary
A hardcoded decryption key in Thinkware Cloud APK v4.3.46 allows attackers to access sensitive data and execute arbitrary commands with elevated privileges.
Risk Assessment
The organization is at risk of sensitive data leakage and system takeover by an unauthorized attacker, potentially leading to severe security breaches.
Recommendation
Immediately update the Thinkware Cloud application to the latest version that fixes this vulnerability, and rotate all potentially compromised keys and passwords.
Original NVD description (English source)
A hardcoded decryption key in Thinkware Cloud APK v4.3.46 allows attackers to access sensitive data and execute arbitrary commands with elevated privileges.