Product:

Morphowave_xp_firmware

(Idemia)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 6
Date Id Summary Products Score Patch Annotated
2023-12-15 CVE-2023-33222 When handling contactless cards, usage of a specific function to get additional information from the card which doesn't check the boundary on the data received while reading. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted device Morphowave_compact_firmware, Morphowave_sp_firmware, Morphowave_xp_firmware, Sigma_extreme_firmware, Sigma_lite\+_firmware, Sigma_lite_firmware, Sigma_wide_firmware, Visionpass_firmware 9.8
2023-12-15 CVE-2023-33217 By abusing a design flaw in the firmware upgrade mechanism of the impacted terminal it's possible to cause a permanent denial of service for the terminal. the only way to recover the terminal is by sending back the terminal to the manufacturer Morphowave_compact_firmware, Morphowave_sp_firmware, Morphowave_xp_firmware, Sigma_extreme_firmware, Sigma_lite\+_firmware, Sigma_lite_firmware, Sigma_wide_firmware, Visionpass_firmware 7.5
2023-12-15 CVE-2023-33220 During the retrofit validation process, the firmware doesn't properly check the boundaries while copying some attributes to check. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted device Morphowave_compact_firmware, Morphowave_sp_firmware, Morphowave_xp_firmware, Sigma_extreme_firmware, Sigma_lite\+_firmware, Sigma_lite_firmware, Sigma_wide_firmware, Visionpass_firmware 9.8
2023-12-15 CVE-2023-33218 The Parameter Zone Read and Parameter Zone Write command handlers allow performing a Stack buffer overflow. This could potentially lead to a Remote Code execution on the targeted device. Morphowave_compact_firmware, Morphowave_sp_firmware, Morphowave_xp_firmware, Sigma_extreme_firmware, Sigma_lite\+_firmware, Sigma_lite_firmware, Sigma_wide_firmware, Visionpass_firmware 9.8
2023-12-15 CVE-2023-33219 The handler of the retrofit validation command doesn't properly check the boundaries when performing certain validation operations. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted device Morphowave_compact_firmware, Morphowave_sp_firmware, Morphowave_xp_firmware, Sigma_extreme_firmware, Sigma_lite\+_firmware, Sigma_lite_firmware, Sigma_wide_firmware, Visionpass_firmware 9.8
2023-12-15 CVE-2023-33221 When reading DesFire keys, the function that reads the card isn't properly checking the boundaries when copying internally the data received. This allows a heap based buffer overflow that could lead to a potential Remote Code Execution on the targeted device. This is especially problematic if you use Default DESFire key. Morphowave_compact_firmware, Morphowave_sp_firmware, Morphowave_xp_firmware, Sigma_extreme_firmware, Sigma_lite\+_firmware, Sigma_lite_firmware, Sigma_wide_firmware, Visionpass_firmware 9.8