PT-2023-24230 · Idemia · Morphowave Compact/Xp+11
CVE-2023-33220
·
Publicado
2023-12-15
·
Atualizado
2023-12-21
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
No specific software or versions are mentioned in the provided descriptions.
Description
The issue arises during the retrofit validation process, where the firmware fails to properly check boundaries while copying certain attributes. This oversight allows for a stack-based buffer overflow, potentially leading to Remote Code Execution on the targeted device.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Stack Overflow
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Morphowave Compact/Xp
Morphowave Sp
Sigma Extreme
Sigma Lite & Lite +
Sigma Wide
Visionpass
Morphowave Compact Firmware
Morphowave Xp Firmware
Sigma Extreme Firmware
Sigma Lite Firmware
Sigma Wide Firmware
Visionpass Firmware