CVE-2024-23806 – HID Global Reader Configuration Cards Improper Authorization

https://notcve.org/view.php?id=CVE-2024-23806

07 Feb 2024 — Sensitive data can be extracted from HID iCLASS SE reader configuration cards. This could include credential and device administrator keys. Se pueden extraer datos confidenciales de las tarjetas de configuración del lector HID iCLASS SE. Esto podría incluir claves de administrador de dispositivos y credenciales. • https://https://www.cisa.gov/news-events/ics-advisories/icsa-24-037-02 • CWE-285: Improper Authorization CWE-287: Improper Authentication •