Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2024-22388 Details
Description
Certain configuration available in the communication channel for encoders could expose sensitive data when reader configuration cards are programmed. This data could include credential and device administration keys.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Feb 15, 2024Exploitation: NoneAutomatable: NoTechnical Impact: Partial
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://support.hidglobal.com/ | CVE | Product |
| https://www.cisa.gov/news-events/ics-advisories/icsa-24-037-01 | CVE | Third Party AdvisoryUS Government Resource |
| https://support.hidglobal.com/ | [email protected] | Product |
| https://www.cisa.gov/news-events/ics-advisories/icsa-24-037-01 | [email protected] | Third Party AdvisoryUS Government Resource |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-1188 | Initialization of a Resource with an Insecure Default | [email protected] |
| NVD-CWE-Other | Weakness Not in a Standard CWE Category | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| hidglobal iclass se cp1000 encoder firmware | All versions |
CPE
Remediation
| |
| hidglobal iclass se cp1000 encoder | All versions |
CPE
Remediation
| |
| hidglobal iclass se readers firmware | All versions |
CPE
Remediation
| |
| hidglobal iclass se readers | All versions |
CPE
Remediation
| |
| hidglobal iclass se reader modules firmware | All versions |
CPE
Remediation
| |
| hidglobal iclass se reader modules | All versions |
CPE
Remediation
| |
| hidglobal iclass se processors firmware | All versions |
CPE
Remediation
| |
| hidglobal iclass se processors | All versions |
CPE
Remediation
| |
| hidglobal omnikey 5427ck firmware | All versions |
CPE
Remediation
| |
| hidglobal omnikey 5427ck | All versions |
CPE
Remediation
| |
| hidglobal omnikey 5127ck firmware | All versions |
CPE
Remediation
| |
| hidglobal omnikey 5127ck | All versions |
CPE
Remediation
| |
| hidglobal omnikey 5023 firmware | All versions |
CPE
Remediation
| |
| hidglobal omnikey 5023 | All versions |
CPE
Remediation
| |
| hidglobal omnikey 5027 firmware | All versions |
CPE
Remediation
| |
| hidglobal omnikey 5027 | All versions |
CPE
Remediation
| |
Change History
7 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| Oct 17, 2024 | CVE Modified | [email protected] |
| May 14, 2024 | CVE Modified | [email protected] |
| Feb 14, 2024 | Initial Analysis | [email protected] |
| Feb 6, 2024 | New CVE Received | [email protected] |