medium5.9
CVE-2024-22388
Certain configuration available in the communication channel for encoders could expose sensitive data when reader configuration cards are programmed.
Impact
Certain configuration available in the communication channel for encoders could expose sensitive data when reader configuration cards are programmed. This data could include credential and device administration keys.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hidglobal | Iclass Se Cp1000 Encoder Firmware | All versions |
| Hidglobal | Iclass Se Readers Firmware | All versions |
| Hidglobal | Iclass Se Reader Modules Firmware | All versions |
| Hidglobal | Iclass Se Processors Firmware | All versions |
| Hidglobal | Omnikey 5427ck Firmware | All versions |
| Hidglobal | Omnikey 5127ck Firmware | All versions |
| Hidglobal | Omnikey 5023 Firmware | All versions |
| Hidglobal | Omnikey 5027 Firmware | All versions |