CVE-2024-29941

Credential Cloning

High · published May 6, 2024

CVSS v3.1
8.0
EPSS
0%
Percentile
1.4
In the wild
Unconfirmed
What it is

Insecure storage of the ICT MIFARE and DESFire encryption keys in the firmware

binary allows malicious actors to create credentials for any site code and card number that is using the default

ICT encryption.

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00113 · 1.4th percentile
Published
2024-05-06T22:33Z
EPSS history
Timeline
  • 06 MAY 22:33Z
    Credential Cloning
    cvelistv5