CVE-2023-33220: falha crítica em IDEMIA MorphoWave Compact/XP
Stack Buffer Overflow when checking some attributes during retrofit
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.1epss 1.1%
During the retrofit validation process, the firmware doesn't properly check the boundaries while copying some attributes
to check. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted
device
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Produtos afetados
IDEMIA · MorphoWave Compact/XPIDEMIA · MorphoWave SPIDEMIA · SIGMA ExtremeIDEMIA · SIGMA Lite & Lite +IDEMIA · SIGMA WideIDEMIA · VisionPassCVEs relacionadas — IDEMIA MorphoWave Compact/XP
No mesmo produto, das mais perigosas para as menos.
CVE-2023-33222MEDIUMStack buffer overflow when reading DESFire cardEPSS 1.3%CVE-2023-33219CRITICALStack Buffer Overflow when checking retrofit packageEPSS 1.1%CVE-2023-33218CRITICALStack Buffer Overflow in a binary run at upgrade startupEPSS 1.1%CVE-2023-33221MEDIUM Heap Buffer Overflow when reading DESFire cardEPSS 1.0%CVE-2023-33217HIGHMissing integrity check on upgrade packageEPSS 0.7%CVE-2023-4667HIGHStored Cross Site Scripting in webserver administrationEPSS 0.4%