CVE-2023-33218: falha crítica em IDEMIA MorphoWave Compact/XP
Stack Buffer Overflow in a binary run at upgrade startup
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.1epss 1.1%
The Parameter Zone Read and Parameter Zone Write command handlers allow performing a Stack buffer overflow.
This could potentially lead to a Remote Code execution on the targeted device.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Produtos afetados
IDEMIA · MorphoWave Compact/XPIDEMIA · MorphoWave SPIDEMIA · SIGMA ExtremeIDEMIA · SIGMA Lite & Lite +IDEMIA · SIGMA WideIDEMIA · VisionPassCVEs relacionadas — IDEMIA MorphoWave Compact/XP
No mesmo produto, das mais perigosas para as menos.
CVE-2023-33222MEDIUMStack buffer overflow when reading DESFire cardEPSS 1.3%CVE-2023-33220CRITICALStack Buffer Overflow when checking some attributes during retrofitEPSS 1.1%CVE-2023-33219CRITICALStack Buffer Overflow when checking retrofit packageEPSS 1.1%CVE-2023-33221MEDIUM Heap Buffer Overflow when reading DESFire cardEPSS 1.0%CVE-2023-33217HIGHMissing integrity check on upgrade packageEPSS 0.7%CVE-2023-4667HIGHStored Cross Site Scripting in webserver administrationEPSS 0.4%