CVE-2023-33217: falha de alta gravidade em IDEMIA MorphoWave Compact/XP
Missing integrity check on upgrade package
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.5epss 0.7%
By abusing a design flaw in the firmware upgrade mechanism of the impacted terminal it's possible to cause a permanent
denial of service for the terminal. the only way to recover the terminal is by sending back the terminal to the manufacturer
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
IDEMIA · MorphoWave Compact/XPIDEMIA · MorphoWave SPIDEMIA · SIGMA ExtremeIDEMIA · SIGMA Lite & Lite +IDEMIA · SIGMA WideIDEMIA · VisionPassCVEs relacionadas — IDEMIA MorphoWave Compact/XP
No mesmo produto, das mais perigosas para as menos.
CVE-2023-33222MEDIUMStack buffer overflow when reading DESFire cardEPSS 1.3%CVE-2023-33220CRITICALStack Buffer Overflow when checking some attributes during retrofitEPSS 1.1%CVE-2023-33219CRITICALStack Buffer Overflow when checking retrofit packageEPSS 1.1%CVE-2023-33218CRITICALStack Buffer Overflow in a binary run at upgrade startupEPSS 1.1%CVE-2023-33221MEDIUM Heap Buffer Overflow when reading DESFire cardEPSS 1.0%CVE-2023-4667HIGHStored Cross Site Scripting in webserver administrationEPSS 0.4%