[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNk7aNC_EFTA5BfX9DBzu6G6vj1X7a-g0YfOErCMhsTw":3,"g5a-risk:CVE-2024-38279":124},{"success":4,"data":5,"meta":121},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":41,"epssPercentile":29,"epssTimeSeries":42,"severity":43,"affectedProducts":44,"affectedProductsCount":55,"references":56,"referencesCount":55,"weaknesses":65,"weaknessesCount":55,"isActivelyExploited":54,"cisaInfo":29,"otxData":29,"relatedBlogPosts":79,"seoMetadata":80,"configurations":105,"relatedVendorCves":119,"notableEvents":120},"CVE-2024-38279","What is CVE-2024-38279?","The affected product is vulnerable to an attacker modifying the bootloader by using custom arguments to bypass authentication and gain access to the file system and obtain password hashes.","The affected product is vulnerable to an attacker modifying the bootloader by using custom arguments to bypass authentication and gain access to the file sys...","2024-06-13T17:15:51.193","2026-06-17T07:39:51.48",5.1,"CVSS:4.0\u002FAV:P\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"CVSSMetricV31":15,"CVSSMetricV30":32,"CVSSMetricV2":33,"CVSSMetricV40":34},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"nvd@nist.gov","Primary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:P\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N","PHYSICAL","LOW","NONE","UNCHANGED","HIGH",4.6,"MEDIUM",null,0.9,3.6,[],[],[35],{"Source":36,"Type":37,"CVSSData":38},"ics-cert@hq.dhs.gov","Secondary",{"Version":39,"VectorString":13,"BaseScore":12,"BaseSeverity":28,"AttackVector":22,"AttackComplexity":23,"AttackRequirements":24,"PrivilegesRequired":24,"UserInteraction":24,"VulnConfidentialityImpact":26,"VulnIntegrityImpact":24,"VulnAvailabilityImpact":24,"SubConfidentialityImpact":24,"SubIntegrityImpact":24,"SubAvailabilityImpact":24,"ExploitMaturity":40,"ConfidentialityRequirement":40,"IntegrityRequirement":40,"AvailabilityRequirement":40,"ModifiedAttackVector":40,"ModifiedAttackComplexity":40,"ModifiedAttackRequirements":40,"ModifiedPrivilegesRequired":40,"ModifiedUserInteraction":40,"ModifiedVulnConfidentialityImpact":40,"ModifiedVulnIntegrityImpact":40,"ModifiedVulnAvailabilityImpact":40,"ModifiedSubConfidentialityImpact":40,"ModifiedSubIntegrityImpact":40,"ModifiedSubAvailabilityImpact":40,"Safety":40,"Automatable":40,"Recovery":40,"ValueDensity":40,"VulnerabilityResponseEffort":40,"ProviderUrgency":40},"4.0","NOT_DEFINED",0.00252,[41,41,41,41,41,41,41],"Medium",[45,50],{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"motorola","vigilant_fixed_lpr_coms_box_firmware","*","cpe:2.3:o:motorola:vigilant_fixed_lpr_coms_box_firmware:*:*:*:*:*:*:*:*",{"vendor":46,"product":51,"version":52,"criteria":53,"vulnerable":54},"vigilant_fixed_lpr_coms_box","-","cpe:2.3:h:motorola:vigilant_fixed_lpr_coms_box:-:*:*:*:*:*:*:*",false,2,[57,63],{"url":58,"source":59,"tags":60},"https:\u002F\u002Fwww.cisa.gov\u002Fnews-events\u002Fics-advisories\u002Ficsa-24-165-19","CISA",[61,62],"Third Party Advisory","US Government Resource",{"url":58,"source":59,"tags":64},[61,62],[66,74],{"id":67,"name":68,"description":69,"extendedDescription":70,"status":71,"abstraction":72,"structure":73},"CWE-306","Missing Authentication for Critical Function","The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","","Draft","Base","Simple",{"id":75,"name":76,"description":77,"extendedDescription":70,"status":78,"abstraction":72,"structure":73},"CWE-288","Authentication Bypass Using an Alternate Path or Channel","A product requires authentication, but the product has an alternate path or channel that does not require authentication.","Incomplete",[],{"title":81,"metaDescription":82,"keywords":83,"canonicalUrl":84,"structuredData":85},"What is CVE-2024-38279? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-38279, a medium severity cyber security vulnerability from 2024. The affected product is vulnerable to an attacker modifyi...","CVE-2024-38279, CVE-2024-38279 vulnerability, CVE-2024-38279 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, motorola security, vigilant_fixed_lpr_coms_box_firmware vulnerability, vigilant_fixed_lpr_coms_box vulnerability","\u002Fwhat-is\u002Fcve-2024-38279",{"@context":86,"@type":87,"headline":81,"description":82,"datePublished":10,"dateModified":11,"author":88,"publisher":92,"about":96,"mainEntityOfPage":100,"articleSection":103,"keywords":104},"https:\u002F\u002Fschema.org","TechArticle",{"@type":89,"name":90,"url":91},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":89,"name":90,"url":91,"logo":93},{"@type":94,"url":95},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":97,"name":6,"description":98,"additionalType":99},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":101,"@id":102},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-38279","Cybersecurity","CVE-2024-38279, CVE-2024-38279 vulnerability, CVE-2024-38279 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[106],{"Operator":107,"Negate":29,"Nodes":108},"AND",[109,115],{"Operator":110,"Negate":54,"CPEMatch":111},"OR",[112],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":113,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":114},"E85B1E9A-C212-4469-AA63-243CDB7187B3","3.1.171.9",{"Operator":110,"Negate":54,"CPEMatch":116},[117],{"Vulnerable":54,"Criteria":53,"MatchCriteriaID":118,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"BC3B1257-7688-48D0-8BDA-6E651746FDBB",[],[],{"lastModified":11,"cacheTime":122,"version":123},1792458757080,"2.0",{"score":125,"band":126,"action":127,"scoredAt":128},18,"Info","Track","2026-10-16T07:02:48.761058+00:00"]