Idemia
8 CVEs across 39 Idemia products. Browse Idemia vulnerabilities, severities, and proof-of-concept exploits.
Idemia products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-33222 | Medium | 6.8 | 2023-12-15 | When handling contactless cards, usage of a specific function to get additional information from the card which doesn't check the boundary on the dat… |
CVE-2023-33221 | Medium | 6.8 | 2023-12-15 | When reading DesFire keys, the function that reads the card isn't properly checking the boundaries when copying internally the data received. This al… |
CVE-2023-33220 | Critical | 9.1 | 2023-12-15 | During the retrofit validation process, the firmware doesn't properly check the boundaries while copying some attributes to check. This allows a stack-… |
CVE-2023-33219 | Critical | 9.1 | 2023-12-15 | The handler of the retrofit validation command doesn't properly check the boundaries when performing certain validation operations. This allows a stack-b… |
CVE-2023-33218 | Critical | 9.1 | 2023-12-15 | The Parameter Zone Read and Parameter Zone Write command handlers allow performing a Stack buffer overflow. This could potentially lead to a Remote Code ex… |
CVE-2023-33217 | High | 7.5 | 2023-12-15 | By abusing a design flaw in the firmware upgrade mechanism of the impacted terminal it's possible to cause a permanent denial of service for the terminal. th… |
CVE-2023-4667 | High | 8.1 | 2023-11-28 | The web interface of the PAC Device allows the device administrator user profile to store malicious scripts in some fields. The stored malicious script is the… |
CVE-2021-35522 | Critical | 9.8 | 2021-07-22 | A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma devices before 4.9.4, and MA VP MD device… |
CVE-2021-35521 | Medium | 5.9 | 2021-07-22 | A path traversal in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows remote authenticated attackers to achieve… |
CVE-2021-35520 | Medium | 6.2 | 2021-07-22 | A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows physically proximate authenticated attack… |
CVE-2017-15567 | High | 7.8 | 2017-10-23 | The certificate import component in IDEMIA (formerly Morpho) MorphoSmart 1300 Series (aka MSO 1300 Series) devices allows local users to obtain a command shell… |