CVE-2024-38282: Insufficiently Protected Credentials in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)

Published Jun 13, 2024

Updated

Utilizing default credentials, an attacker is able to log into the camera's operating system which could allow changes to be made to the operations or shutdown the camera requiring a physical reboot of the system.

Affected Software

1 affected component

Motorola Solutions Vigilant Fixed LPR Coms Box

Remediation

Information

Motorola Solutions recommends the following for each identified vulnerability: CVE-2024-38282: * Remove the hard coded credentials. * Use a unique CJIS compliant password per device. Motorola Solutions has already remediated this vulnerability for all vulnerable systems. No further actions are required by customers.

Event History

Jun 13, 2024

CVE Published

via MITRE·05:13 PM

Data Sourced

via MITRE·05:13 PM

RemedyDescriptionWeakness

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-38282?

CVE-2024-38282 is considered a high-severity vulnerability due to the potential for unauthorized access and control over the camera's operating system.

How do I fix CVE-2024-38282?

To mitigate CVE-2024-38282, change the default credentials on the affected Motorola Solutions Vigilant Fixed LPR Coms Box devices immediately.

What could an attacker do if they exploit CVE-2024-38282?

If exploited, CVE-2024-38282 allows an attacker to log into the camera's operating system and make unauthorized changes or shut down the camera.

Which devices are affected by CVE-2024-38282?

CVE-2024-38282 affects the Motorola Solutions Vigilant Fixed LPR Coms Box.

Is CVE-2024-38282 a persistent vulnerability?

CVE-2024-38282 can be persistent if default credentials are not changed, allowing continued unauthorized access until mitigated.