CVE-2024-29941

8.0 highEPSS 0.1%

High (8.0). EPSS 0.1% chance of exploitation in the next 30 days.

Insecure storage of the ICT MIFARE and DESFire encryption keys in the firmware binary allows malicious actors to create credentials for any site code and card number that is using the default ICT encryption.

Severity

CVSS 3.1

8.0 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-31)
CWE: CWE-522
Published: 2024-05-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://ict.co/media/1xdhaugi/credential-cloning.pdf
https://ict.co/media/1xdhaugi/credential-cloning.pdf

Check your stack JSON