Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Ossur records in CISA KEVNo Ossur vulnerabilities are listed in CISA KEV.
Priority LOW 25
A valid set of credentials in a .js file and a static token for communication were obtained from the decompiled IPA.
CVSS 4.0MEDIUM 5.6· Local · High privileges · No interaction · EPSS 0.00193 · Published 2025-01-17 · Fixed in 1.5.5 CWE-497
Priority LOW 11
Multiple bash files were present in the application's private directory.
CVSS 4.0LOW 2.0· Network · Low privileges · User interaction · EPSS 0.00303 · Published 2025-01-17 · Fixed in 1.5.5 CWE-77
Priority LOW 11
Hard-coded credentials were included as part of the application binary.
CVSS 4.0LOW 2.0· Physical · No auth · No interaction · EPSS 0.00298 · Published 2025-01-17 · Fixed in 1.5.5 CWE-798
