CVE-2024-1578

The MiCard PLUS Ci and MiCard PLUS BLE reader products developed by rf IDEAS and rebranded by NT-ware have a firmware fault that may result in characters randomly being dropped from some ID card reads, which would result in the wrong ID card number being assigned during ID card self-registration and might result in failed login attempts for end-users. Random characters being dropped from ID card numbers compromises the uniqueness of ID cards that can, therefore, result in a security issue if the users are using the ‘ID card self-registration’ function.

Score
CVSS 4.0 5.3 Medium
Status
Analyzed - 4586e0a2-224d-4f8a-9cb4-8882b208c0b3
Published
2024-09-16
Last modified
2024-09-16
Weaknesses
CWE-1287

Affected products

References

 
 
© AVABIS GmbH privacypolicy about