Skip to content
OpenAdvisories
High ICSA-24-263-05 2 CVEs

Kastle Systems Access Control System

Published Sep 19, 2024 · Updated Sep 19, 2024

Vendor: Kastle Systems Product: Access Control System Firmware

Summary

Successful exploitation of these vulnerabilities could allow an attacker to access sensitive information on the affected product.

Vulnerabilities 2

  • Critical 9.2
    CVE-2024-45861

    Use of Hard-coded Credentials in Kastle Systems Access Control System

    Kastle Systems firmware prior to May 1, 2024, contained a hard-coded credential, which if accessed may allow an attacker to access sensitive information.

    Kastle Systems Access Control System
  • High 8.7
    CVE-2024-45862

    Cleartext Storage of Sensitive Information in Kastle Systems Access Control System

    Kastle Systems firmware prior to May 1, 2024, stored machine credentials in cleartext, which may allow an attacker to access sensitive information.

    Kastle Systems Access Control System

Revision history

  1. #1

    Initial Publication

References