Kastle Access Control System Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Kastle Access Control System Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2024-45861 — CVSS 7.5 (high): Kastle Systems firmware prior to May 1, 2024, contained a hard-coded credential, which if accessed may allow an attacker to access…
• CVE-2024-45862 — CVSS 7.5 (high): Kastle Systems firmware prior to May 1, 2024, stored machine credentials in cleartext, which may allow an attacker to access sensitive…