Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2024-1578
PUBLISHED
More InfoOfficial Page
Assigner-Canon_EMEA
Assigner Org ID-4586e0a2-224d-4f8a-9cb4-8882b208c0b3
View Known Exploited Vulnerability (KEV) details
Published At-16 Sep, 2024 | 06:59
Updated At-16 Sep, 2024 | 14:33
Rejected At-
▼CVE Numbering Authority (CNA)
Multiple MiCard PLUS card reader dropped characters

The MiCard PLUS Ci and MiCard PLUS BLE reader products developed by rf IDEAS and rebranded by NT-ware have a firmware fault that may result in characters randomly being dropped from some ID card reads, which would result in the wrong ID card number being assigned during ID card self-registration and might result in failed login attempts for end-users. Random characters being dropped from ID card numbers compromises the uniqueness of ID cards that can, therefore, result in a security issue if the users are using the ‘ID card self-registration’ function.

Affected Products
Vendor
Rebranded by NT-ware (originally developed and provided by rf IDEAS)
Product
MiCard PLUS Ci
Modules
  • RDR-80031BKU-NT-20
Default Status
unknown
Versions
Affected
  • 0.1.0.7 (custom)
Vendor
Rebranded by NT-ware (originally developed and provided by rf IDEAS)
Product
MiCard PLUS BLE
Modules
  • RDR-30531EKU-NT-20
Default Status
unknown
Versions
Affected
  • 0.1.0.4 (custom)
Problem Types
TypeCWE IDDescription
CWECWE-1287CWE-1287: Improper Validation of Specified Type of Input
Metrics
VersionBase scoreBase severityVector
4.05.3MEDIUM
CVSS:4.0/AV:P/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Metrics Other Info
Impacts
CAPEC IDDescription
N/ANot applicable
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://ntware.atlassian.net/wiki/spaces/SA/pages/11973853216/2024+Security+Advisory+Multiple+MiCard+PLUS+card+reader+dropped+characters
vendor-advisory
mitigation
https://www.canon-europe.com/psirt/advisory-information
vendor-advisory
mitigation
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Vendor
nt-ware
Product
micard_plus_ci
CPEs
  • cpe:2.3:a:nt-ware:micard_plus_ci:*:*:*:*:*:*:*:*
Default Status
unknown
Versions
Affected
  • 0.1.0.7
Vendor
nt-ware
Product
micard_plus_ble
CPEs
  • cpe:2.3:a:nt-ware:micard_plus_ble:*:*:*:*:*:*:*:*
Default Status
unknown
Versions
Affected
  • 0.1.0.4
Metrics
VersionBase scoreBase severityVector
3.15.3MEDIUM
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
Details not found