Vulnerability in Rebranded By Nt-Ware (Originally Developed And Provided Rf Ideas) Micard Plus Ble
CVE-2024-1578
The MiCard PLUS Ci and MiCard PLUS BLE reader products developed by rf IDEAS and rebranded by NT-ware have a firmware fault that may result in characters randomly being dropped from some ID card reads, which would result in the wrong ID card number being assigned during ID card self-registration and might result in failed login attempts for end-users. Random characters being dropped from ID card numbers compromises the uniqueness of ID cards that can, therefore, result in a security issue if the users are using the ‘ID card self-registration’ function.
EPSS: 0.002 (10.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L.
Affected products
- Rebranded By Nt-ware (Originally Developed And Provided Rf Ideas) Micard Plus Ble — versions 0.1.0.4
- Rebranded By Nt-ware (Originally Developed And Provided Rf Ideas) Micard Plus Ci — versions 0.1.0.7
- Rfideas Micard_plus_ble
- Rfideas Micard_plus_ble_firmware — versions 0.1.0.4
- Rfideas Micard_plus_ci
- Rfideas Micard_plus_ci_firmware — versions 0.1.0.7
Weakness classification (CWE)
References
- 4586e0a2-224d-4f8a-9cb4-8882b208c0b3 (vendor-advisory, Third Party Advisory, Mitigation, mitigation)
- 4586e0a2-224d-4f8a-9cb4-8882b208c0b3 (vendor-advisory, mitigation, Vendor Advisory)
Frequently asked questions
- What is CVE-2024-1578?
- CVE-2024-1578 is a medium-severity vulnerability in Rebranded By Nt-Ware (Originally Developed And Provided Rf Ideas) Micard Plus Ble, classified under CWE-1287. CVSS score: 5.3/10. Published 2024-09-16.
- How severe is CVE-2024-1578?
- Medium severity. CVSS v3 base score is 5.3 out of 10.