CVE-2024-22388CWE-1188

Insecure Default Initialization of Resource in HID Global

Medium · published February 6, 2024

CVSS v3.1
5.9
EPSS
0%
Percentile
5.8
In the wild
Unconfirmed
What it is

Certain configuration available in the communication channel for encoders could expose sensitive data when reader configuration cards are programmed. This data could include credential and device administration keys.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00168 · 5.8th percentile
Weakness
CWE-1188 · Initialization of a Resource with an Insecure Default
Published
2024-02-06T23:06Z
EPSS history
Timeline
  • 06 FEB 23:06Z
    Insecure Default Initialization of Resource in HID Global
    cvelistv5