CVE-2024-23806

Katalog CVE

CVSS 5.3 · Medium EPSS 0,25%

Kerentanan Improper Authorization pada hidglobal omnikey secure elements reader configuration cards firmware, hidglobal iclass se reader configuration cards firmware. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

Sensitive data can be extracted from HID iCLASS SE reader configuration cards. This could include credential and device administrator keys.

Rincian

Terbit di NVD

7 Februari 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-285: Improper Authorization
CWE-287: Improper Authentication

EPSS (30 hari)

0,25% peluang dieksploitasi; lebih tinggi dari 15,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.cisa.gov/news-events/ics-advisories/icsa-24-037-02
• https://www.hidglobal.com/support product
• https://https://www.cisa.gov/news-events/ics-advisories/icsa-24-037-02