CVE-2024-38282
published 2024-06-13CVE-2024-38282: Utilizing default credentials, an attacker is able to log into the camera's operating system which could allow changes to be made to the operations or shutdown…
PriorityP338high8.5CVSS 4.0
AVLACLATNPRNUINVCHVIHVANSCNSINSANEXCRXIRXARXMAVXMACXMATXMPRXMUIXMVCXMVIXMVAXMSCXMSIXMSAXSXAUXRXVXREXUX
EPSS
0.16%
5.7th percentile
Utilizing default credentials, an attacker is able to log into the camera's operating system which could allow changes to be made to the operations or shutdown the camera requiring a physical reboot of the system.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| motorola_solutions | vigilant_fixed_lpr_coms_box | <= 3.1.171.9 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Motorola Solutions Vigilant License Plate Readers
cisa_ics·2024-06-13·CVSS 5.1
[MEDIUM] Motorola Solutions Vigilant License Plate Readers
ICS Advisory
##
Motorola Solutions Vigilant License Plate Readers
Release DateJune 13, 2024
Alert CodeICSA-24-165-19
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v4 8.7
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Motorola Solutions
- Equipment: Vigilant Fixed LPR Coms Box (BCAV1F2-C600)
- Vulnerabilities: Authentication Bypass Using an Alternate Path or Channel, Cleartext Storage in a File or on Disk, Use of Hard-coded Credentials, Insufficiently Protected Credentials, Missing Encryption of Sensitive Data, Authentication Bypass by Capture-replay
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities could allow an attacker to tamper wi
GHSA
GHSA-4mhw-2p42-7v79: Utilizing default credentials, an attacker is able to log into the camera's operating system which could allow changes to be made to the operations or
ghsa_unreviewed·2024-06-13
CVE-2024-38282 CWE-522 GHSA-4mhw-2p42-7v79: Utilizing default credentials, an attacker is able to log into the camera's operating system which could allow changes to be made to the operations or
Utilizing default credentials, an attacker is able to log into the camera's operating system which could allow changes to be made to the operations or shutdown the camera requiring a physical reboot of the system.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-06-13
Published