Idemia Sigma Lite & Lite +
7 CVEs affecting Idemia Sigma Lite & Lite +. Latest disclosed: 2023-12-15. Critical: 3, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-33220 | Critical | 9.1 | 2023-12-15 | During the retrofit validation process, the firmware doesn't properly check the boundaries while copying some attributes to check. This allows a stack-… |
CVE-2023-33219 | Critical | 9.1 | 2023-12-15 | The handler of the retrofit validation command doesn't properly check the boundaries when performing certain validation operations. This allows a stack-b… |
CVE-2023-33218 | Critical | 9.1 | 2023-12-15 | The Parameter Zone Read and Parameter Zone Write command handlers allow performing a Stack buffer overflow. This could potentially lead to a Remote Code ex… |
CVE-2023-4667 | High | 8.1 | 2023-11-28 | The web interface of the PAC Device allows the device administrator user profile to store malicious scripts in some fields. The stored malicious script is the… |
CVE-2023-33217 | High | 7.5 | 2023-12-15 | By abusing a design flaw in the firmware upgrade mechanism of the impacted terminal it's possible to cause a permanent denial of service for the terminal. th… |
CVE-2023-33222 | Medium | 6.8 | 2023-12-15 | When handling contactless cards, usage of a specific function to get additional information from the card which doesn't check the boundary on the dat… |
CVE-2023-33221 | Medium | 6.8 | 2023-12-15 | When reading DesFire keys, the function that reads the card isn't properly checking the boundaries when copying internally the data received. This al… |