CVE-2024-54982

Published: Dic 19, 2024 Last Modified: Apr 15, 2026 EU-VD ID: EUVD-2024-52717
ExploitDB:
Other exploit source:
Google Dorks:

Description

AI Translation Available

An issue in Quectel BC25 with firmware version BC25PAR01A06 allows attackers to bypass authentication via a crafted NAS message. NOTE: Quectel disputes this because the issue is in the chipset supply chain and is not localized to one or more Quectel products.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0004
Percentile
0,1th
Updated

EPSS Score Trend (Last 91 Days)

https://github.com/haroldfeng/nbiot-va/blob/master/Quectel_…
https://github.com/haroldfeng/nbiot-va/blob/master/Quectel_BC25_Subscriber_Auth…