CVE-2024-22388

· MEDIUMModified

← All CVEs

CVSS v3.1

5.9

EPSS

0.17%

Published

Feb 6, 2024

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Certain configuration available in the communication channel for encoders could expose sensitive data when reader configuration cards are programmed. This data could include credential and device administration keys.

CVSS Vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N

Weaknesses (CWE)

CWE-1188

Affected Products (16)

hidglobal · iclass_se_cp1000_encoder_firmwarevulnerable

hidglobal · iclass_se_cp1000_encoder

hidglobal · iclass_se_readers_firmwarevulnerable

hidglobal · iclass_se_readers

hidglobal · iclass_se_reader_modules_firmwarevulnerable

hidglobal · iclass_se_reader_modules

hidglobal · iclass_se_processors_firmwarevulnerable

hidglobal · iclass_se_processors

hidglobal · omnikey_5427ck_firmwarevulnerable

hidglobal · omnikey_5427ck

hidglobal · omnikey_5127ck_firmwarevulnerable

hidglobal · omnikey_5127ck

hidglobal · omnikey_5023_firmwarevulnerable

hidglobal · omnikey_5023

hidglobal · omnikey_5027_firmwarevulnerable

hidglobal · omnikey_5027

References (4)

https://support.hidglobal.com/

Product

https://www.cisa.gov/news-events/ics-advisories/icsa-24-037-01

Third Party AdvisoryUS Government Resource

https://support.hidglobal.com/

Product

https://www.cisa.gov/news-events/ics-advisories/icsa-24-037-01

Third Party AdvisoryUS Government Resource

KEV Catalog EPSS Scores Vendors All CVEs