What’s Vulnerable › Vulnerabilities

CVE-2024-38280: Cleartext Storage in a File or on Disk in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)

• Severity: medium (CVSS 4.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-06-13 · updated 2026-06-17
• Weakness: CWE-313

Description

An unauthorized user is able to gain access to sensitive data, including credentials, by physically retrieving the hard disk of the product as the data is stored in clear text.

Affected products

• Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600): through 3.1.171.9

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-19
• https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-19

Get alerted when CVE-2024-38280 or the next vulnerability affects your stack