PT-2024-27917 · Motorola Solutions+1 · Vigilant Fixed Lpr Coms Box+2

Published 2024-06-13 · Updated 2024-10-03 · CVE-2024-38279

Positive Technologies (AI Summary)

CVSS v4.0

5.1

Medium

Base vector

AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Affected product (affected versions not specified)

Description The issue allows an attacker to modify the bootloader by using custom arguments to bypass authentication, gaining access to the file system and obtaining password hashes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-306

CWE-288

Related Identifiers

CVE-2024-38279

Affected Products

Vigilant Fixed Lpr Coms Box

Vigilant Fixed Lpr Coms Box Bcav1F2 C600

Vigilant Fixed Lpr Coms Box Firmware

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-38279 · Security Note
• https://osv.dev/vulnerability/CVE-2024-38279 · Vendor Advisory
• https://twitter.com/CVEnew/status/1801311436028919823 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-24-165-19 · Note