Medium severity · published Feb 6, 2025
CVE-2024-13417
Specifically crafted payloads sent to the RFID reader could cause DoS of RFID reader
4.6
CVSS
0.2%
EPSS
No
On KEV
Description
Specifically crafted payloads sent to the RFID reader could cause DoS of RFID reader. After the device is restarted, it gets back to fully working state.
2N has released an updated version 2.46 of 2N OS, where this vulnerability is mitigated. It is recommended that all customers update their devices to the latest 2N OS.
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 13% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
2O
2N OS · 2N
2N RFID equipped products running 2N OS 2.45 and prior · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-13417
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-13417
www.2n.com
https://www.2n.com/en-GB/download/cve_2024_1341x_2nos_2_46_v1pdf
More from 2N OS
4.3
CVE-2024-13416
Using API in the 2N OS device, authorized user can enable logging, which discloses valid authentication tokens in system log