Motorola Solutions Vigilant Fixed LPR Coms Box (Bcav1F2 C600) vulnerabilities
7 vulnerabilities
Known vulnerabilities in Motorola Solutions Vigilant Fixed LPR Coms Box (Bcav1F2 C600), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2024-38279motorola solutionsvigilant fixed lpr coms box (bcav1f2-c600)+1
EPSS score0.25%
The affected product is vulnerable to an attacker modifying the bootloader by using custom arguments to bypass authentication and gain access to the file system and obtain password hashes.CVE-2024-38285motorola solutionsvigilant fixed lpr coms box (bcav1f2-c600)EPSS score0.21%
Logs storing credentials are insufficiently protected and can be decoded through the use of open source tools.CVE-2024-38283motorola solutionsvigilant fixed lpr coms box (bcav1f2-c600)EPSS score0.10%
Sensitive customer information is stored in the device without encryption.CVE-2024-38281motorola solutionsvigilant fixed lpr coms box (bcav1f2-c600)+1EPSS score0.39%
An attacker can access the maintenance console using hard coded credentials for a hidden wireless network on the device.CVE-2024-38282motorola solutionsvigilant fixed lpr coms box (bcav1f2-c600)EPSS score0.16%
Utilizing default credentials, an attacker is able to log into the camera's operating system which could allow changes to be made to the operations or shutdown the camera requiring a physical reboot of the system.CVE-2024-38284motorola solutionsvigilant fixed lpr coms box (bcav1f2-c600)EPSS score0.34%
Transmitted data is logged between the device and the backend service. An attacker could use these logs to perform a replay attack to replicate calls.CVE-2024-38280motorola solutionsvigilant fixed lpr coms box (bcav1f2-c600)+1EPSS score0.15%
An unauthorized user is able to gain access to sensitive data, including credentials, by physically retrieving the hard disk of the product as the data is stored in clear text.