CVE-2024-22388

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Certain configuration available in the communication channel for encoders could expose sensitive data when reader configuration cards are programmed. This data could include credential and device administration keys.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-1188

Affected software

No affected versions have been published.

Timeline

Published
Feb 6, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-223897.2When BIG-IP is deployed in high availability (HA) and an iControl REST API token is updated, the change does not sync to the peer device. CVE-2024-22395.4The Premium Addons PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Premium Magic Scroll module in all versionsCVE-2024-223904.4Improper input validation in firmware for some Intel(R) FPGA products before version 2.9.1 may allow denial of service.CVE-2024-223919.8A heap-based buffer overflow vulnerability exists in the LookupTable::SetLUT functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A spCVE-2024-223939.1Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer.This issue affects Apache Answer: through 1.2.1. Pixel FloodCVE-2024-223949.8An improper authentication vulnerability has been identified in SonicWall SonicOS SSL-VPN feature, which in specific conditions could allow CVE-2024-223956.3Improper access control vulnerability has been identified in the SMA100 SSL-VPN virtual office portal, which in specific conditions could poCVE-2024-223965.3An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of SCVE-2024-223978.3Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the SonicOS SSLVPN portal allows a remote authenticaCVE-2024-223984.9An improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in SonicWall Email Security Appliance could alCVE-2024-223999.8Deserialization of Untrusted Data vulnerability in Apache Seata.  When developers disable authentication on the Seata-Server and do not useCVE-2024-22407.2Docker daemon in Brocade SANnav before SANnav 2.3.1b runs without auditing. The vulnerability could allow a remote authenticated attacker to
CVE-2024-22388: High severity, CVSS 7.8 | Vulnix