CVE-2024-2197
CVE-2024-2197 details a critical vulnerability within the Chirp Access app due to a hard-coded password. This flaw enables unauthorized configuration changes to Bluetooth beacons within range. The SVRS score of 30 indicates a moderate risk, suggesting that while the vulnerability is present, the immediate threat level may not be as severe compared to critical vulnerabilities. An attacker exploiting this issue could disable the app's proximity notifications. Although this vulnerability cannot compromise door readers or locksets, it can disrupt user access point awareness. This is significant because it allows attackers to potentially mislead users about their location relative to secured access points and manipulate beacon configurations. Immediate patching and password changes are highly recommended to mitigate the risk.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.