CVE-2024-38280
Cleartext Storage in a File or on Disk in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)
- State
- Published
- Severity
- 7.0 High
- Published
- Jun 13, 2024
- Updated
- Aug 2, 2024
- Reserved
- Jun 12, 2024
Description
An unauthorized user is able to gain access to sensitive data, including credentials, by physically retrieving the hard disk of the product as the data is stored in clear text.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 7.0 High | CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | icscert |
Weaknesses
- CWE-313 Cleartext Storage in a File or on Disk
Affected Products
| Product | Versions |
|---|---|
Vigilant Fixed LPR Coms Box (BCAV1F2-C600)Motorola Solutions |
|
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-19government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.