CVE-2024-54982

Published: Dic 19, 2024 Last Modified: Gen 16, 2025 EU-VD ID: EUVD-2024-52717
ExploitDB:
Other exploit source:
Google Dorks:

Description

AI Translation Available

An issue in Quectel BC25 with firmware version BC25PAR01A06 allows attackers to bypass authentication via a crafted NAS message. NOTE: Quectel disputes this because the issue is in the chipset supply chain and is not localized to one or more Quectel products.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0006
Percentile
0,2th
Updated

EPSS Score Trend (Last 90 Days)

https://github.com/haroldfeng/nbiot-va/blob/master/Quectel_…
https://github.com/haroldfeng/nbiot-va/blob/master/Quectel_BC25_Subscriber_Auth…