CVE-2024-38285
published 2024-06-13CVE-2024-38285: Logs storing credentials are insufficiently protected and can be decoded through the use of open source tools.
PriorityP422high7CVSS 4.0
AVPACLATNPRNUINVCHVIHVAHSCNSINSANEXCRXIRXARXMAVXMACXMATXMPRXMUIXMVCXMVIXMVAXMSCXMSIXMSAXSXAUXRXVXREXUX
EPSS
0.21%
11.5th percentile
Logs storing credentials are insufficiently protected and can be decoded through the use of open source tools.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| motorola_solutions | vigilant_fixed_lpr_coms_box | <= 3.1.171.9 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Motorola Solutions Vigilant License Plate Readers
cisa_ics·2024-06-13·CVSS 5.1
[MEDIUM] Motorola Solutions Vigilant License Plate Readers
ICS Advisory
##
Motorola Solutions Vigilant License Plate Readers
Release DateJune 13, 2024
Alert CodeICSA-24-165-19
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v4 8.7
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Motorola Solutions
- Equipment: Vigilant Fixed LPR Coms Box (BCAV1F2-C600)
- Vulnerabilities: Authentication Bypass Using an Alternate Path or Channel, Cleartext Storage in a File or on Disk, Use of Hard-coded Credentials, Insufficiently Protected Credentials, Missing Encryption of Sensitive Data, Authentication Bypass by Capture-replay
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities could allow an attacker to tamper wi
GHSA
GHSA-q49m-qrh9-4jc8: Logs storing credentials are insufficiently protected and can be decoded through the use of open source tools
ghsa_unreviewed·2024-06-13
CVE-2024-38285 CWE-522 GHSA-q49m-qrh9-4jc8: Logs storing credentials are insufficiently protected and can be decoded through the use of open source tools
Logs storing credentials are insufficiently protected and can be decoded through the use of open source tools.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-06-13
Published