The vulnerability CVE-2024-1662 affects the PowerBank Application from PORTY Smart Tech Technology Joint Stock Company prior to version 2.02. It is characterized by missing authentication and authorization controls on a critical function, which permits an attacker to retrieve embedded sensitive data without any privileges or user interaction. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) confirms the vulnerability is remotely exploitable with low attack complexity and no required privileges, resulting in a high confidentiality impact. The vulnerability is categorized under CWE-306 (Missing Authentication for Critical Function) and CWE-862 (Missing Authorization). No patch or official fix has been documented or linked by the vendor as of the publication date.

Successful exploitation allows an unauthenticated attacker to retrieve embedded sensitive data from the PowerBank Application, compromising confidentiality. There is no impact on integrity or availability. The vulnerability is exploitable remotely without any user interaction or privileges, increasing the risk of data exposure.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the affected application where possible and monitor for unauthorized access attempts. Avoid deploying the affected versions in sensitive environments if feasible.