CVE-2024-22388 — Insecure Default Initialization of Resource in HID Global

Description (CNA)

Certain configuration available in the communication channel for encoders could expose sensitive data when reader configuration cards are programmed. This data could include credential and device administration keys.

Affected (CNA)

Vendor / product	Versions
HID Global / iCLASS SE CP1000 Encoder	affected All
HID Global / iCLASS SE Readers	affected All
HID Global / iCLASS SE Reader Modules	affected All
HID Global / iCLASS SE Processors	affected All
HID Global / OMNIKEY 5427CK Readers	affected All
HID Global / OMNIKEY 5127CK Readers	affected All
HID Global / OMNIKEY 5023 Readers	affected All
HID Global / OMNIKEY 5027 Readers	affected All

CWE

CWE-1188

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-037-01
https://support.hidglobal.com/

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/news-events/ics-advisories/icsa-24-037-01
https://support.hidglobal.com/

CISA-ADP

No English description supplied.

No references supplied.