VULNERABILITY INTELLIGENCE

CVE-2024-54982

EPSS probability0.25%
CISA KEVNot currently listed
Published2024-12-19
Last modified2026-06-17

Description

An issue in Quectel BC25 with firmware version BC25PAR01A06 allows attackers to bypass authentication via a crafted NAS message. NOTE: Quectel disputes this because the issue is in the chipset supply chain and is not localized to one or more Quectel products.

Primary references