High severity · published Jun 13, 2024
CVE-2024-38282
Insufficiently Protected Credentials in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)
8.5
CVSS
0.2%
EPSS
No
On KEV
Description
Utilizing default credentials, an attacker is able to log into the camera's operating system which could allow changes to be made to the operations or shutdown the camera requiring a physical reboot of the system.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 5% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VF
Vigilant Fixed LPR Coms Box (BCAV1F2-C600) · Motorola Solutions
through 3.1.171.9 · source: vendor
VF
Vigilant Fixed Lpr Coms Box Bcav1f2 C600 · Motorolasolutions
before 3.1.171.9 · source: CISA
Affected product
VF
Vigilant Fixed LPR Coms Box (BCAV1F2-C600)
Motorola Solutions
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-38282
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-38282
www.cisa.gov
https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-19
More from Vigilant Fixed LPR Coms Box (BCAV1F2-C600)
9.8
CVE-2024-38281
Use of Hard-coded Credentials in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)
8.7
CVE-2024-38284
Authentication Bypass by Capture-replay in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)
7.0
CVE-2024-38285
Insufficiently Protected Credentials in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)
5.1
CVE-2024-38283
Missing Encryption of Sensitive Data in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)
4.6
CVE-2024-38280
Cleartext Storage in a File or on Disk in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)