CVE-2024-38279CWE-288
Authentication Bypass Using an Alternate Path or Channel in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)
Medium · published June 13, 2024
What it is
The affected product is vulnerable to an attacker modifying the bootloader by using custom arguments to bypass authentication and gain access to the file system and obtain password hashes.
The record
Technical detail
- CVSS v4.0
- 5.1 · MEDIUM
- Vector
- CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
- EPSS
- 0.00252 · 15.8th percentile
- Weakness
- CWE-288 · Authentication Bypass Using an Alternate Path or Channel
- Published
- 2024-06-13T17:00Z
EPSS history
Timeline