Skip to content
OpenAdvisories
Medium · 5.1 CVE-2024-38279 EUVD-2024-37240GHSA-qcm6-ww7j-hm8x

Authentication Bypass Using an Alternate Path or Channel in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)

Published Jun 13, 2024 · Updated Aug 2, 2024 · Assigned by icscert

Description

The affected product is vulnerable to an attacker modifying the bootloader by using custom arguments to bypass authentication and gain access to the file system and obtain password hashes.

Affected products

VendorProductAffectedFixed
Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600) ≤ 3.1.171.9 —

Advisories 1

References