Skip to content
OpenAdvisories
High · 8.0 CVE-2024-29941 EUVD-2024-26915GHSA-wh7x-ww7q-h9hp

Credential Cloning

Published May 6, 2024 · Updated Aug 2, 2024 · Assigned by ICT

Description

Insecure storage of the ICT MIFARE and DESFire encryption keys in the firmware
binary allows malicious actors to create credentials for any site code and card number that is using the default
ICT encryption.

Affected products

VendorProductAffectedFixed
Integrated Control Technology TSEC — —

References