CVE-2024-45862CWE-312

Cleartext Storage of Sensitive Information in Kastle Systems Access Control System

High · published September 19, 2024

CVSS v4.0
8.7
EPSS
0%
Percentile
15.2
In the wild
Unconfirmed
What it is

Kastle Systems firmware prior to May 1, 2024, stored machine credentials in cleartext, which may allow an attacker to access sensitive information.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00248 · 15.2th percentile
Weakness
CWE-312 · Cleartext Storage of Sensitive Information
Published
2024-09-19T15:54Z
EPSS history
Timeline
  • 19 SEP 15:54Z
    Cleartext Storage of Sensitive Information in Kastle Systems Access Control System
    cvelistv5