CVE-2024-29941 — Credential Cloning
Insecure storage of the ICT MIFARE and DESFire encryption keys in the firmware binary allows malicious actors to create credentials for any site code and card number that is usi…
Published: 2024-05-06 · CVSS: 8.0 · CVSS 3.1
Insecure storage of the ICT MIFARE and DESFire encryption keys in the firmware binary allows malicious actors to create credentials for any site code and card number that is using the default ICT encryption.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7