CVE-2024-22388: Hidglobal Iclass SE CP1000 Encoder Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Certain configuration available in the communication channel for encoders could expose sensitive data when reader configuration cards are programmed. This data could include credential and device administration keys.

Affected products

• Hidglobal Iclass SE CP1000 Encoder Firmware: any version
• Hidglobal Iclass SE Processors Firmware: any version
• Hidglobal Iclass SE Reader Modules Firmware: any version
• Hidglobal Iclass SE Readers Firmware: any version
• Hidglobal Omnikey 5023 Firmware: any version
• Hidglobal Omnikey 5027 Firmware: any version
• Hidglobal Omnikey 5127ck Firmware: any version
• Hidglobal Omnikey 5427ck Firmware: any version

Published 2024-02-06. Last modified 2026-06-17.