CVE-2024-38285: Insufficiently Protected Credentials in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)
Published Jun 13, 2024
·Updated
Logs storing credentials are insufficiently protected and can be decoded through the use of open source tools.
Affected Software
1 affected component
Motorola Solutions Vigilant Fixed LPR Coms Box
Remediation
Information
Motorola Solutions recommends the following for each identified vulnerability:
CVE-2024-38285:
* Delete the log files.
Motorola Solutions has already remediated this vulnerability for all vulnerable systems. No further actions are required by customers.
Event History
Jun 13, 2024
CVE Published
via MITRE·05:26 PM
Data Sourced
via MITRE·05:26 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-38285?
CVE-2024-38285 is classified as a high severity vulnerability due to the potential exposure of sensitive credentials.
2
How do I fix CVE-2024-38285?
To fix CVE-2024-38285, ensure that logs storing credentials are properly encrypted and access controls are implemented.
3
What software is affected by CVE-2024-38285?
CVE-2024-38285 specifically affects the Motorola Solutions Vigilant Fixed LPR Coms Box.
4
What risks are associated with CVE-2024-38285?
The risks associated with CVE-2024-38285 include unauthorized access to sensitive data and potential exploitation by attackers.
5
Is CVE-2024-38285 being actively exploited?
As of now, there is no public indication that CVE-2024-38285 is being actively exploited in the wild.