CVE-2024-45861

The CVE-2024-45861 vulnerability affects Kastle Systems Access Control System firmware prior to May 1, 2024. The issue is use of hard-coded credentials in the firmware (CVE-2024-45861) which, if accessed, could allow an attacker to obtain sensitive information. The CISA ICS advisory confirms remo...

CVE-2024-45862

Summary: CVE-2024-45862 affects Kastle Systems Access Control System firmware released before 01 May 2024. The root cause is cleartext storage of machine credentials, which may allow an attacker to access sensitive information. The connected sources confirm the issue and provide CVSS scores (v3.1...