VULNERABILITY INTELLIGENCE
CVE-2024-22388
CVSS score5.9 MEDIUM
EPSS probability0.17%
CISA KEVNot currently listed
Published2024-02-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Description
Certain configuration available in the communication channel for encoders could expose sensitive data when reader configuration cards are programmed. This data could include credential and device administration keys.
Weakness classification
- ics-cert@hq.dhs.gov: CWE-1188
- nvd@nist.gov: NVD-CWE-Other
Primary references
- ics-cert@hq.dhs.gov — Product
- ics-cert@hq.dhs.gov — Third Party Advisory, US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — Product
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource