CVE-2024-2197

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

The Chirp Access app contains a hard-coded password, BEACON_PASSWORD. An attacker within Bluetooth range could change configuration settings within the Bluetooth beacon, effectively disabling the application's ability to notify users when they are near a Beacon-enabled access point. This variable cannot be used to change the configuration settings of the door readers or locksets and does not affect the ability for authorized users of the mobile application to lock or unlock access points.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-259

Affected software

No affected versions have been published.

Timeline

Published: Mar 20, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-219704.4Improper validation of an array index in the AND power Management Firmware could allow a privileged attacker to corrupt AGESA memory potenti CVE-2024-219715.5Improper input validation in AMD Crash Defender could allow an attacker to provide the Windows® system process ID to a kernel-mode driver, r CVE-2024-219725.3An out of bounds write vulnerability in the AMD Radeon™ user mode driver for DirectX® 11 could allow an attacker with access to a malformed CVE-2024-219747.8Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary c CVE-2024-219757.8Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary c CVE-2024-219768.8Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary c CVE-2024-219773.2Incomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to degrade the entropy of the RDRAND instruction, pot CVE-2024-219787.9Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially leading to data leakag CVE-2024-219795.3An out of bounds write vulnerability in the AMD Radeon™ user mode driver for DirectX® 11 could allow an attacker with access to a malformed CVE-2024-21986.1The Contact Form by BestWebSoft plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘cntctfrm_contact_address’ para CVE-2024-219807.9Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or UMC CVE-2024-219815.7Improper key usage control in AMD Secure Processor (ASP) may allow an attacker with local access who has gained arbitrary code execution pri