CVE-2024-48775 describes a security vulnerability in Plug n Play Camera com.ezset.delaney version 1.2.0 where a remote attacker can exploit the firmware update process to gain access to sensitive information. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity, with an attack vector that is network-based, requiring no privileges or user interaction. The weakness is categorized under CWE-306 (Missing Authentication for Critical Function), implying that the firmware update mechanism lacks proper authentication controls, enabling unauthorized information disclosure.

Successful exploitation allows an unauthenticated remote attacker to obtain sensitive information from the device via the firmware update process. This could lead to exposure of confidential data but does not affect integrity or availability according to the CVSS vector.

No patch or official fix has been published for this vulnerability as of the provided data. Users and administrators should monitor the vendor's advisories for updates and apply any forthcoming patches promptly. Until a fix is available, restricting network access to the device and monitoring for suspicious activity related to firmware updates may reduce risk.