PT-2024-18146 · Unknown · Micard Plus Ci+1

Published 2024-09-16 · Updated 2024-09-20 · CVE-2024-1578

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions MiCard PLUS Ci and MiCard PLUS BLE reader products (affected versions not specified)

Description The issue is related to a firmware fault in the MiCard PLUS Ci and MiCard PLUS BLE reader products, which may cause characters to be randomly dropped from some ID card reads. This can result in the wrong ID card number being assigned during ID card self-registration, potentially leading to failed login attempts for end-users. The randomness of dropped characters compromises the uniqueness of ID cards, posing a security issue when using the 'ID card self-registration' function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1287

Related Identifiers

CVE-2024-1578

Affected Products

Micard Plus Ble

Micard Plus Ci

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2024-1578 · Security Note
• https://osv.dev/vulnerability/CVE-2024-1578 · Vendor Advisory
• https://ntware.atlassian.net/wiki/spaces/SA/pages/11973853216/2024+Security+Advisory+Multiple+MiCard+PLUS+card+reader+dropped+characters · Vendor Advisory
• https://canon-europe.com/psirt/advisory-information · Vendor Advisory
• https://t.me/cvenotify/95429 · Telegram Post
• https://twitter.com/CVEnew/status/1835578336417833145 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1835627726637506724 · Twitter Post
• https://t.me/cvedetector/5714 · Telegram Post
• https://t.me/cvenotify/94697 · Telegram Post