Lucene search
IcscertCVELIST:CVE-2024-22388HistoryFeb 06, 2024 - 11:06 p.m.
CVE-2024-22388 HID Global Encoders Improper Authorization
2024-02-0623:06:07
CWE-285
icscert
www.cve.org
3
cve-2024-22388
configuration
communication
sensitive data
reader
credential
device administration
keys
hid global
CVSS3
5.9
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
AI Score
7.8
Confidence
High
EPSS
0
Percentile
5.3%
Certain configuration available in the communication channel for encoders could expose sensitive data when reader configuration cards are programmed. This data could include credential and device administration keys.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "iCLASS SE CP1000 Encoder",
"vendor": "HID Global",
"versions": [
{
"status": "affected",
"version": "All"
}
]
},
{
"defaultStatus": "unaffected",
"product": "iCLASS SE Readers",
"vendor": "HID Global",
"versions": [
{
"status": "affected",
"version": "All"
}
]
},
{
"defaultStatus": "unaffected",
"product": "iCLASS SE Reader Modules",
"vendor": "HID Global",
"versions": [
{
"status": "affected",
"version": "All"
}
]
},
{
"defaultStatus": "unaffected",
"product": "iCLASS SE Processors",
"vendor": "HID Global",
"versions": [
{
"status": "affected",
"version": "All"
}
]
},
{
"defaultStatus": "unaffected",
"product": "OMNIKEY 5427CK Readers",
"vendor": "HID Global",
"versions": [
{
"status": "affected",
"version": "All"
}
]
},
{
"defaultStatus": "unaffected",
"product": "OMNIKEY 5127CK Readers",
"vendor": "HID Global",
"versions": [
{
"status": "affected",
"version": "All"
}
]
},
{
"defaultStatus": "unaffected",
"product": "OMNIKEY 5023 Readers",
"vendor": "HID Global",
"versions": [
{
"status": "affected",
"version": "All"
}
]
},
{
"defaultStatus": "unaffected",
"product": "OMNIKEY 5027 Readers",
"vendor": "HID Global",
"versions": [
{
"status": "affected",
"version": "All"
}
]
}
]Related
ics
ics
HID Global Encoders
2024-02-06 12:00:00
prion
prion
Design/Logic Flaw
2024-02-06 23:15:00
nvd
nvd
CVE-2024-22388
2024-02-06 23:15:08
cve
cve
CVE-2024-22388
2024-02-06 23:15:08
vulnrichment
vulnrichment
CVE-2024-22388 HID Global Encoders Improper Authorization
2024-02-06 23:06:07
CVSS3
5.9
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
AI Score
7.8
Confidence
High
EPSS
0
Percentile
5.3%
Related for CVELIST:CVE-2024-22388