CVE-2024-48772: An issue in C-CHIP (com.cchip.cchipamaota) v.1.2.8 allows a remote attacker to obtain sensitive information...

Security readout for executives and security teams

CVE-2024-48772 affects C-CHIP app package com.cchip.cchipamaota version 1.2.8. Public reporting says a remote attacker can obtain sensitive information through the firmware update process. The CVSS score is 9.1, driven by network reachability and no required authentication or user interaction. No cited source confirms active exploitation. Exposure is most likely where the C-CHIP Android package com.cchip.cchipamaota v1.2.8 is installed or embedded in managed devices and can reach its firmware update service. The source bundle does not define affected hardware models, regions, or other app versions. Treat as high-priority for environments using C-CHIP-managed devices because the reported impact includes sensitive information exposure and potential integrity impact. Prioritize inventory first, since public sources do not identify all affected models or a confirmed fix. Mitigation focus: Inventory devices for com.cchip.cchipamaota version 1.2.8.; Check C-CHIP and app distribution channels for vendor guidance or updates.; Restrict or remove the app where it is not operationally required..

Prepared

Jul 5, 2026, 11:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.