CVE-2024-23806

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Sensitive data can be extracted from HID iCLASS SE reader configuration cards. This could include credential and device administrator keys.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Weakness enumeration

CWE-285CWE-287

Affected software

VendorProductVersions
HID GlobalHID iCLASS SE reader configuration cardsAll
HID GlobalOMNIKEY Secure Elements reader configuration cardsAll

References

Timeline

Published
Feb 7, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-238079.8The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered during the scanning of external DTCVE-2024-238087.8in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free or cauCVE-2024-238099.8A double-free vulnerability exists in the BrainVision ASCII Header Parsing functionality of The Biosig Project libbiosig 2.5.0 and Master BrCVE-2024-23818.8The AliExpress Dropshipping with AliNext Lite plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validatiCVE-2024-238109.8A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application is vulnerable to SQL injection. This coCVE-2024-238118.8A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application allows users to upload arbitrary files CVE-2024-238128.8A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application incorrectly neutralizes special elementCVE-2024-238139.8A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The REST API endpoints of doorsconnector of the affected produCVE-2024-238145.3The integrated ICMP service of the network stack of affected devices can be forced to exhaust its available memory resources when receivingCVE-2024-238157.5A vulnerability has been identified in Desigo CC (All versions if access from Installed Clients to Desigo CC server is allowed from networksCVE-2024-238169.8A vulnerability has been identified in Location Intelligence Perpetual Large (9DE5110-8CA13-1AX0) (All versions < V4.3), Location IntelligenCVE-2024-238176.1Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package. Version 18.0.4 has a HTML Inj
CVE-2024-23806: Medium severity, CVSS 5.3 | Vulnix