CVE-2024-38283
published 2024-06-13CVE-2024-38283: Sensitive customer information is stored in the device without encryption.
PriorityP417medium5.1CVSS 4.0
AVPACLATNPRNUINVCHVINVANSCNSINSANEXCRXIRXARXMAVXMACXMATXMPRXMUIXMVCXMVIXMVAXMSCXMSIXMSAXSXAUXRXVXREXUX
EPSS
0.10%
1.0th percentile
Sensitive customer information is stored in the device without encryption.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| motorola_solutions | vigilant_fixed_lpr_coms_box | <= 3.1.171.9 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Motorola Solutions Vigilant License Plate Readers
cisa_ics·2024-06-13·CVSS 5.1
[MEDIUM] Motorola Solutions Vigilant License Plate Readers
ICS Advisory
##
Motorola Solutions Vigilant License Plate Readers
Release DateJune 13, 2024
Alert CodeICSA-24-165-19
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v4 8.7
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Motorola Solutions
- Equipment: Vigilant Fixed LPR Coms Box (BCAV1F2-C600)
- Vulnerabilities: Authentication Bypass Using an Alternate Path or Channel, Cleartext Storage in a File or on Disk, Use of Hard-coded Credentials, Insufficiently Protected Credentials, Missing Encryption of Sensitive Data, Authentication Bypass by Capture-replay
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities could allow an attacker to tamper wi
GHSA
GHSA-mq78-vgg5-pj68: Sensitive customer information is stored in the device without encryption
ghsa_unreviewed·2024-06-13
CVE-2024-38283 CWE-311 GHSA-mq78-vgg5-pj68: Sensitive customer information is stored in the device without encryption
Sensitive customer information is stored in the device without encryption.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-06-13
Published