critical9.1
CVE-2023-33218
The Parameter Zone Read and Parameter Zone Write command handlers allow performing a Stack buffer overflow.
Impact
The Parameter Zone Read and Parameter Zone Write command handlers allow performing a Stack buffer overflow. This could potentially lead to a Remote Code execution on the targeted device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Idemia | Sigma Lite Firmware | before 4.15.5 |
| Idemia | Sigma Lite\+ Firmware | before 4.15.5 |
| Idemia | Sigma Extreme Firmware | before 4.15.5 |
| Idemia | Sigma Wide Firmware | before 4.15.5 |
| Idemia | Morphowave Compact Firmware | before 2.12.2 |
| Idemia | Morphowave Xp Firmware | before 2.12.2 |
| Idemia | Visionpass Firmware | before 2.12.2 |
| Idemia | Morphowave Sp Firmware | before 1.2.7 |