Medium severity4.6NVD Advisory· Published Jun 13, 2024· Updated Jun 17, 2026

CVE-2024-38279

Description

The affected product is vulnerable to an attacker modifying the bootloader by using custom arguments to bypass authentication and gain access to the file system and obtain password hashes.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Motorola/Vigilant Fixed Lpr Coms Box Firmware
cpe:2.3:o:motorola:vigilant_fixed_lpr_coms_box_firmware:*:*:*:*:*:*:*:*
Range: <=3.1.171.9
Cisagov/ICS Advisoriesllm-create
Motorola Solutions/Vigilant Fixed LPR Coms Box (BCAV1F2-C600)v5
Range: 0

Patches

Vulnerability mechanics

References

www.cisa.gov/news-events/ics-advisories/icsa-24-165-19nvdThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

Severity

MediumCVSS v3.1

4.6/ 10

CVSS v45.1

CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack vector: Physical
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: None
Availability: None

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

Probability of exploitation in the next 30 days.

0.25%

VYPR risk score

Composite of severity, exploitation, and reach.

0.30low

cvss	0.299
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

Weaknesses

CWE-288
Authentication Bypass Using an Alternate Path or Channel
CWE-306
Missing Authentication for Critical Function

CVE ID

CVE-2024-38279

Credits

TM
The Michigan State Police Michigan Cyber Command Center (MC3)
finder