Skip to content
OpenAdvisories
Medium · 5.9 CVE-2024-22388 EUVD-2024-19945GHSA-j839-f55x-qp69

Insecure Default Initialization of Resource in HID Global

Published Feb 6, 2024 · Updated May 7, 2025 · Assigned by icscert

Description

Certain configuration available in the communication channel for encoders could expose sensitive data when reader configuration cards are programmed. This data could include credential and device administration keys.

Affected products

VendorProductAffectedFixed
HID Global iCLASS SE CP1000 Encoder All —
HID Global iCLASS SE Readers All —
HID Global iCLASS SE Reader Modules All —
HID Global iCLASS SE Processors All —
HID Global OMNIKEY 5427CK Readers All —
HID Global OMNIKEY 5127CK Readers All —
HID Global OMNIKEY 5023 Readers All —
HID Global OMNIKEY 5027 Readers All —

Advisories 1

References