CVE-2024-48784: Sampmax Firmware

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

An Incorrect Access Control issue in SAMPMAX com.sampmax.homemax 2.1.2.7 allows a remote attacker to obtain sensitive information via the firmware update process.

Affected products

  • Sampmax Sampmax Firmware: version 2.1.2.7 only

Published 2024-10-11. Last modified 2026-07-05.