Vulnerability in Integrated Control Technology Tsec
CVE-2024-29941
Insecure storage of the ICT MIFARE and DESFire encryption keys in the firmware binary allows malicious actors to create credentials for any site code and card number that is using the default ICT encryption.
EPSS: 0.001 (1.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.0 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L.
Affected products
- Integrated Control Technology Tsec — versions 0
Weakness classification (CWE)
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2024-29941?
- CVE-2024-29941 is a high-severity vulnerability in Integrated Control Technology Tsec, classified under Insufficiently Protected Credentials. CVSS score: 8.0/10. Published 2024-05-06.
- How severe is CVE-2024-29941?
- High severity. CVSS v3 base score is 8.0 out of 10.
- Is CVE-2024-29941 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.