What’s Vulnerable › Vulnerabilities

CVE-2024-1578: Multiple MiCard PLUS card reader dropped characters

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-09-16 · updated 2026-06-17
• Weakness: CWE-1287

Description

The MiCard PLUS Ci and MiCard PLUS BLE reader products developed by rf IDEAS and rebranded by NT-ware have a firmware fault that may result in characters randomly being dropped from some ID card reads, which would result in the wrong ID card number being assigned during ID card self-registration and might result in failed login attempts for end-users. Random characters being dropped from ID card numbers compromises the uniqueness of ID cards that can, therefore, result in a security issue if the users are using the ‘ID card self-registration’ function.

Affected products

• Rfideas Micard Plus Ble Firmware: 0.1.0.4
• Rfideas Micard Plus Ci Firmware: 0.1.0.7

References

• https://ntware.atlassian.net/wiki/spaces/SA/pages/11973853216/2024+Security+Advisory+Multiple+MiCard+PLUS+card+reader+dropped+characters
• https://www.canon-europe.com/psirt/advisory-information

Get alerted when CVE-2024-1578 or the next vulnerability affects your stack