Lucene search

IcscertCVE-2024-38279

HistoryJun 13, 2024 - 5:15 p.m.

CVE-2024-38279

2024-06-1317:15:51

CWE-288

icscert

web.nvd.nist.gov

cve-2024-38279

motorola solutions

authentication bypass

file system access

password hashes

CVSS4

5.1

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/SC:N/VI:N/SI:N/VA:N/SA:N

AI Score

7.1

Confidence

Low

EPSS

Percentile

9.0%

JSON

The affected product is vulnerable to an attacker modifying the bootloader by using custom arguments to bypass authentication and gain access to the file system and obtain password hashes.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Vigilant Fixed LPR Coms Box (BCAV1F2-C600)",
    "vendor": "Motorola Solutions",
    "versions": [
      {
        "lessThanOrEqual": "3.1.171.9",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.cisa.gov/news-events/ics-advisories/icsa-24-165-19

CVSS4

5.1

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/SC:N/VI:N/SI:N/VA:N/SA:N

AI Score

7.1

Confidence

Low

EPSS

Percentile

9.0%

JSON

Related for CVE-2024-38279