CVE-2024-22388— Insecure Default Initialization of Resource in HID Global
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-22388
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Insecure Default Initialization of Resource in HID Global
Source: NVD (National Vulnerability Database)
Vulnerability Description
Certain configuration available in the communication channel for encoders could expose sensitive data when reader configuration cards are programmed. This data could include credential and device administration keys.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
不安全的默认资源初始化
Source: NVD (National Vulnerability Database)
Vulnerability Title
HID Global OMNIKEY 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
HID Global OMNIKEY是美国HID Global公司的一个硬件设备。用于读取卡。 HID Global OMNIKEY和iCLASS SE存在安全漏洞。攻击者利用该漏洞可以获取敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| HID Global | iCLASS SE CP1000 Encoder | All | - | |
| HID Global | iCLASS SE Readers | All | - | |
| HID Global | iCLASS SE Reader Modules | All | - | |
| HID Global | iCLASS SE Processors | All | - | |
| HID Global | OMNIKEY 5427CK Readers | All | - | |
| HID Global | OMNIKEY 5127CK Readers | All | - | |
| HID Global | OMNIKEY 5023 Readers | All | - | |
| HID Global | OMNIKEY 5027 Readers | All | - |
II. Public POCs for CVE-2024-22388
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-22388
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same weakness: CWE-1188
- CVE-2026-44109
OpenClaw < 2026.4.15 - Authentication Bypass in Feishu Webho - CVE-2026-43581
OpenClaw < 2026.4.10 - Chrome DevTools Protocol Exposure via - CVE-2026-41931
Vvveb < 1.0.8.2 Information Disclosure via Debug Exception H - CVE-2025-31974
HCL BigFix Service Management (SM) is susceptible to a Root - CVE-2026-39920
BridgeHead FileStore < 24A Apache Axis2 Default Credentials
V. Comments for CVE-2024-22388
No comments yet