CVEvulnerability

CVE-2024-29941

8.0 HIGH Published 2024-05-06 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2024-05-06
Last modified
2026-06-17
Assigner
56c94bcb-ac34-4d7f-b660-d297a6b7ff82
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
8.0 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Weaknesses
CWE-522

Description

Insecure storage of the ICT MIFARE and DESFire encryption keys in the firmware binary allows malicious actors to create credentials for any site code and card number that is using the default ICT encryption.

Related

Weakness · CWE (1)

  • CWE-522 Insufficiently Protected Credentials weakness

References