CVE-2024-29941

2024-05-0623:15:06

56c94bcb-ac34-4d7f-b660-d297a6b7ff82

web.nvd.nist.gov

insecure storage

ict

mifare

desfire

encryption keys

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Insecure storage of the ICT MIFARE and DESFire encryption keys in the firmware
binary allows malicious actors to create credentials for any site code and card number that is using the default
ICT encryption.

References

ict.co/media/1xdhaugi/credential-cloning.pdf