CVE-2024-29941 Vulnerability Details

  /     /     /  

CVE-2024-29941 Metadata Quick Info

CVE Published: 06/05/2024 | CVE Updated: 02/08/2024 | CVE Year: 2024
Source: ICT | Vendor: Integrated Control Technology | Product: TSEC
Status : PUBLISHED

---

CVE-2024-29941 Description

Insecure storage of the ICT MIFARE and DESFire encryption keys in the firmware binary allows malicious actors to create credentials for any site code and card number that is using the default ICT encryption.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name:
Source: Integrated Control Technology

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).