HI
Vendor
Hidglobal
58
CVEs
0
On KEV
0
New 30D
Products
EF10.0
Ep4502 Firmware
Hidglobal
8 CVEs0 on KEV0 new
LF10.0
Lp1501 Firmware
Hidglobal
8 CVEs0 on KEV0 new
LF10.0
Lp1502 Firmware
Hidglobal
8 CVEs0 on KEV0 new
LF10.0
Lp2500 Firmware
Hidglobal
8 CVEs0 on KEV0 new
LF10.0
Lp4502 Firmware
Hidglobal
8 CVEs0 on KEV0 new
ES7.8
Easylobby Solo
Hidglobal
4 CVEs0 on KEV0 new
DP5.9
Digital Persona U.are.u 4500 Driver Firmware
Hidglobal
1 CVEs0 on KEV0 new
IS7.8
Iclass SE Cp1000 Encoder Firmware
Hidglobal
1 CVEs0 on KEV0 new
IS7.8
Iclass SE Processors Firmware
Hidglobal
1 CVEs0 on KEV0 new
IS5.3
Iclass SE Reader Configuration Cards Firmware
Hidglobal
1 CVEs0 on KEV0 new
IS7.8
Iclass SE Reader Modules Firmware
Hidglobal
1 CVEs0 on KEV0 new
IS7.8
Iclass SE Readers Firmware
Hidglobal
1 CVEs0 on KEV0 new
O57.8
Omnikey 5023 Firmware
Hidglobal
1 CVEs0 on KEV0 new
O57.8
Omnikey 5027 Firmware
Hidglobal
1 CVEs0 on KEV0 new
O58.8
Omnikey 5127 Firmware
Hidglobal
1 CVEs0 on KEV0 new
O57.8
Omnikey 5127ck Firmware
Hidglobal
1 CVEs0 on KEV0 new
O58.8
Omnikey 5427 Firmware
Hidglobal
1 CVEs0 on KEV0 new
O57.8
Omnikey 5427ck Firmware
Hidglobal
1 CVEs0 on KEV0 new
OS5.3
Omnikey Secure Elements Reader Configuration Cards Firmware
Hidglobal
1 CVEs0 on KEV0 new
SA7.3
Safe
Hidglobal
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-23806 | OS Omnikey Secure Elements Reader Configuration Cards Firmware Hidglobal | 5.3 | Feb 7 | Sensitive data can be extracted from HID iCLASS SE reader configuration cards |
| CVE-2024-22388 | IS Iclass SE Cp1000 Encoder Firmware Hidglobal | 7.8 | Feb 6 | Certain configuration available in the communication channel for encoders could expose sensitive data when reader configuration cards are programmed |
| CVE-2023-2904 | SA Safe Hidglobal | 7.3 | Jun 7 | The External Visitor Manager portal of HID’s SAFE versions 5.8.0 through 5.11.3 are vulnerable to manipulation within web fields in the application programmable interface (API) |
| CVE-2022-31486 | LF Lp1501 Firmware Hidglobal | 8.8 | Jun 6 | An authenticated attacker can send a specially crafted route to the “edit_route.cgi” binary and have it execute shell commands |
| CVE-2022-31485 | LF Lp1501 Firmware Hidglobal | 5.3 | Jun 6 | An unauthenticated attacker can send a specially crafted packets to update the “notes” section of the home page of the web interface |
| CVE-2022-31484 | LF Lp1501 Firmware Hidglobal | 7.5 | Jun 6 | An unauthenticated attacker can send a specially crafted network packet to delete a user from the web interface |
| CVE-2022-31483 | LF Lp1501 Firmware Hidglobal | 8.8 | Jun 6 | An authenticated attacker can upload a file with a filename including “..” and “/” to achieve the ability to upload the desired file anywhere on the filesystem |
| CVE-2022-31482 | LF Lp1501 Firmware Hidglobal | 7.5 | Jun 6 | An unauthenticated attacker can send a specially crafted unauthenticated HTTP request to the device that can overflow a buffer |
| CVE-2022-31481 | LF Lp1501 Firmware Hidglobal | 10.0 | Jun 6 | An unauthenticated attacker can send a specially crafted update file to the device that can overflow a buffer |
| CVE-2022-31480 | LF Lp1501 Firmware Hidglobal | 7.5 | Jun 6 | An unauthenticated attacker could arbitrarily upload firmware files to the target device, ultimately causing a Denial-of-Service (DoS) |
| CVE-2022-31479 | LF Lp1501 Firmware Hidglobal | 9.8 | Jun 6 | An unauthenticated attacker can update the hostname with a specially crafted name that will allow for shell commands to be executed during the core collection process |
| CVE-2020-36283 | O5 Omnikey 5427 Firmware Hidglobal | 8.8 | Mar 24 | HID OMNIKEY 5427 and OMNIKEY 5127 readers are vulnerable to CSRF when using the EEM driver (Ethernet Emulation Mode) |
| CVE-2019-13603 | DP Digital Persona U.are.u 4500 Driver Firmware Hidglobal | 5.9 | Jul 16 | An issue was discovered in the HID Global DigitalPersona (formerly Crossmatch) U.are.U 4500 Fingerprint Reader Windows Biometric Framework driver 5.0.0.5 |
| CVE-2018-17492 | ES Easylobby Solo Hidglobal | 7.8 | Mar 19 | EasyLobby Solo contains default administrative credentials |
| CVE-2018-17491 | ES Easylobby Solo Hidglobal | 7.8 | Mar 19 | EasyLobby Solo could allow a local attacker to gain elevated privileges on the system |
| CVE-2018-17490 | ES Easylobby Solo Hidglobal | 7.1 | Mar 19 | EasyLobby Solo is vulnerable to a denial of service |
| CVE-2018-17489 | ES Easylobby Solo Hidglobal | 5.5 | Mar 19 | EasyLobby Solo could allow a local attacker to obtain sensitive information, caused by the storing of the social security number in plaintext |