CVE-2024-38282 HIGH

CVE-2024-38282: Insufficiently Protected Credentials in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)

Vendor Motorola Solutions
Product Vigilant Fixed LPR Coms Box (BCAV1F2-C600)
Weakness CWE-522 · Insufficiently protected credentials
Published June 13, 2024
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

8.5/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Utilizing default credentials, an attacker is able to log into the camera's operating system which could allow changes to be made to the operations or shutdown the camera requiring a physical reboot of the system.

Key dates

02Disclosure timeline

June 13, 2024 CVE published
August 2, 2024 Record updated