Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-23806 EUVD-2024-21259GHSA-whv2-8g4p-xpx6

HID Global Reader Configuration Cards Improper Authorization

Published Feb 7, 2024 · Updated Jun 13, 2025 · Assigned by icscert

Description

Sensitive data can be extracted from HID iCLASS SE reader configuration cards. This could include credential and device administrator keys.

Affected products

VendorProductAffectedFixed
HID Global HID iCLASS SE reader configuration cards All —
HID Global OMNIKEY Secure Elements reader configuration cards All —

Advisories 1

References