CVE-2018-17489 affects HID Global EasyLobby Solo, where it insecurely stores social security numbers in plaintext within its database. A local attacker with basic user privileges could exploit this by directly accessing the kiosk and viewing the Visitor table, leading to the unauthorized disclosure of sensitive personal information. Rated Medium severity (CVSS 5.5), this vulnerability requires local access and low attack complexity, but results in high confidentiality impact. While not listed in CISA's KEV catalog and lacking public exploit code in Metasploit or ExploitDB, it has received minimal community discussion and limited media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
11.0.4563CPE matchmatch criteria | cpe:2.3:a:hidglobal:easylobby_solo:11.0.4563:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.