What’s Vulnerable › Vulnerabilities

CVE-2024-38279: Authentication Bypass Using an Alternate Path or Channel in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)

• Severity: medium (CVSS 4.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-06-13 · updated 2026-06-17
• Weakness: CWE-288

Description

The affected product is vulnerable to an attacker modifying the bootloader by using custom arguments to bypass authentication and gain access to the file system and obtain password hashes.

Affected products

• Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600): through 3.1.171.9

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-19
• https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-19

Get alerted when CVE-2024-38279 or the next vulnerability affects your stack