PatchTheCVECVE-2024-1578: The MiCard PLUS Ci and MiCard PLUS BLE reader products developed by rf IDEAS and rebranded by NT-ware have a f
CVE-2024-1578 is a medium-severity flaw (CVSS 5.3) affecting micard plus ci firmware, micard plus ble firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
The MiCard PLUS Ci and MiCard PLUS BLE reader products developed by rf IDEAS and rebranded by NT-ware have a firmware fault that may result in characters randomly being dropped from some ID card reads, which would result in the wrong ID card number being assigned during ID card self-registration and might result in failed login attempts for end-users. Random characters being dropped from ID card numbers compromises the uniqueness of ID cards that
Why this priority
- No elevated risk signals yet
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 5.3 (Medium) |
| Attack vector | Physical |
| Attack complexity | High |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.2% (top 90%) |
| CISA exploited list | No |
| Weakness | CWE-1287 |
| Published | 2024-09-16 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-1578?
micard plus ci firmware: mitigate or apply the listed mitigation; micard plus ble firmware: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2024-1578 being exploited?
CVE-2024-1578 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-1578 affect?
CVE-2024-1578 affects micard plus ci firmware, micard plus ble firmware. Severity is medium (CVSS 5.3). The MiCard PLUS Ci and MiCard PLUS BLE reader products developed by rf IDEAS and rebranded by NT-ware have a firmware fault that may result in characters randomly being dropped from some ID card reads, which would result in the wrong ID car
How urgent is CVE-2024-1578?
Priority 21/100. No elevated risk signals yet.