What’s Vulnerable › Vulnerabilities

CVE-2024-22388: Insecure Default Initialization of Resource in HID Global

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-02-06 · updated 2026-06-17
• Weakness: CWE-1188

Description

Certain configuration available in the communication channel for encoders could expose sensitive data when reader configuration cards are programmed. This data could include credential and device administration keys.

Affected products

• Hidglobal Iclass Se Cp1000 Encoder Firmware: all versions
• Hidglobal Iclass Se Processors Firmware: all versions
• Hidglobal Iclass Se Reader Modules Firmware: all versions
• Hidglobal Iclass Se Readers Firmware: all versions
• Hidglobal Omnikey 5023 Firmware: all versions
• Hidglobal Omnikey 5027 Firmware: all versions
• Hidglobal Omnikey 5127Ck Firmware: all versions
• Hidglobal Omnikey 5427Ck Firmware: all versions

References

• https://support.hidglobal.com/
• https://www.cisa.gov/news-events/ics-advisories/icsa-24-037-01
• https://support.hidglobal.com/
• https://www.cisa.gov/news-events/ics-advisories/icsa-24-037-01

Get alerted when CVE-2024-22388 or the next vulnerability affects your stack