7.8
CVE-2024-22388
- EPSS 0.17%
- Veröffentlicht 06.02.2024 23:15:08
- Zuletzt bearbeitet 21.11.2024 08:56:10
- Quelle ics-cert@hq.dhs.gov
- CVE-Watchlists
- Unerledigt
LoginInsecure Default Initialization of Resource in HID Global
Certain configuration available in the communication channel for encoders could expose sensitive data when reader configuration cards are programmed. This data could include credential and device administration keys.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.17% | 0.064 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| ics-cert@hq.dhs.gov | 5.9 | 1.4 | 4 |
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
|
CWE-1188 Initialization of a Resource with an Insecure Default
The product initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure.
https://support.hidglobal.com/
https://www.cisa.gov/news-events/ics-advisories/icsa-24-037-01