Skip to content
OpenAdvisories

Vendor

HID Global

8 known vulnerabilities.

HID Global at a glance

Last 12 months
1
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 1 vulnerability February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202610
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

EasyLobby Solo 4 SAFE 1 iCLASS SE CP1000 Encoder 1 iCLASS SE Readers 1 iCLASS SE Reader Modules 1 iCLASS SE Processors 1 HID iCLASS SE reader configuration cards 1 OMNIKEY 5427CK Readers 1 OMNIKEY Secure Elements reader configuration cards 1 OMNIKEY 5127CK Readers 1 OMNIKEY 5023 Readers 1 OMNIKEY 5027 Readers 1 ActivIdentity 1 HID SAFE using the optional External Visitor Manager portal 0

Latest advisories

  • Medium max 5.9
    ICSA-24-037-01 1 CVE

    HID Global Encoders

    Successful exploitation of this vulnerability could allow an attacker to read data from reader configuration cards and credentials. Reader configuration cards contain credential and device administration keys which could be used to create malicious configurat…

    HID Global
  • Medium max 5.3
    ICSA-24-037-02 1 CVE

    HID Global Reader Configuration Cards

    Successful exploitation of this vulnerability could allow an attacker to read the credential and device administration keys from a configuration card. Those keys could be used to create malicious configuration cards or credentials.

    HID Global
  • High max 7.3
    ICSA-23-152-02 1 CVE

    HID Global SAFE

    Successful exploitation of this vulnerability could result in exposure of personal data or create a denial-of-service condition.

    HID Global
All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • High 7.8
    CVE-2021-47859

    ActivIdentity 8.2 - 'ac.sharedstore' Unquoted Service Path

    ActivIdentity 8.2 contains an unquoted service path vulnerability in the ac.sharedstore service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path in C:\Program Files\Common Files\ActivIdentity\ t…

    HID Global ActivIdentity
  • Medium 5.3
    CVE-2024-23806

    HID Global Reader Configuration Cards Improper Authorization

    Sensitive data can be extracted from HID iCLASS SE reader configuration cards. This could include credential and device administrator keys.

    HID Global OMNIKEY Secure Elements reader configuration cards HID iCLASS SE reader configuration cards
  • Medium 5.9
    CVE-2024-22388

    Insecure Default Initialization of Resource in HID Global

    Certain configuration available in the communication channel for encoders could expose sensitive data when reader configuration cards are programmed. This data could include credential and device administration keys.

    HID Global OMNIKEY 5427CK Readers OMNIKEY 5023 Readers iCLASS SE Readers
  • High 7.3
    CVE-2023-2904

    CVE-2023-2904

    The External Visitor Manager portal of HID’s SAFE versions 5.8.0 through 5.11.3 are vulnerable to manipulation within web fields in the application programmable interface (API). An attacker could log in using account credentials available through a request ge…

    HID Global SAFE
  • Low 2.9
    CVE-2018-17489

    EasyLobby Solo could allow a local attacker to obtain sensitive information, caused by the storing of the social securi…

    HID Global EasyLobby Solo
  • High 7.7
    CVE-2018-17490

    EasyLobby Solo is vulnerable to a denial of service. By visiting the kiosk and accessing the task manager, a local atta…

    HID Global EasyLobby Solo
  • High 8.4
    CVE-2018-17492

    EasyLobby Solo contains default administrative credentials. An attacker could exploit this vulnerability to gain full a…

    HID Global EasyLobby Solo
  • High 8.4
    CVE-2018-17491

    EasyLobby Solo could allow a local attacker to gain elevated privileges on the system. By visiting the kiosk and typing…

    HID Global EasyLobby Solo