CVE-2024-48788 is a vulnerability in YESCAM (com.yescom.YesCam.zwave) version 1.0.2 where a remote attacker can gain access to sensitive information via the firmware update mechanism. The vulnerability is classified under CWE-319, indicating exposure of sensitive information during transmission. The CVSS 3.1 base score is 7.5, reflecting a high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The impact is limited to confidentiality compromise; integrity and availability are not affected. No patch or official remediation has been provided as of the published date, and no known exploits are reported in the wild.

An attacker can remotely obtain sensitive information from the device during the firmware update process, potentially exposing confidential data. The vulnerability does not impact the integrity or availability of the device or its firmware.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting network access to the device's firmware update interface and monitor for unusual activity related to firmware updates.