CVE Vulnerabilities

CVE-2021-24046

Modification of Assumed-Immutable Data (MAID)

Published: Jan 14, 2022 | Modified: Nov 21, 2024
CVSS 3.x
5.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

A logic flaw in Ray-BanĀ® Stories device software allowed some parameters like video capture duration limit to be modified through the Facebook View application. This issue affected versions of device software before 2107460.6810.0.

Weakness

The product does not properly protect an assumed-immutable element from being modified by an attacker.

Affected Software

Name Vendor Start Version End Version
Stories_rw4003_65582v_48-23_firmware Ray-ban * 2107460.6810.0 (excluding)

Potential Mitigations

References