CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-33221

When reading DesFire keys, the function that reads the card isn't properly checking the boundaries when copying internally the data received. This allows a heap based buffer overflow that could lead to a potential Remote Code Execution on the targeted device. This is especially problematic if you use Default DESFire key.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.007

EPSS Ranking 72.1%

CVSS Severity

CVSS v3 Score 6.8

References

Products affected by CVE-2023-33221

Idemia » Morphowave Compact » Version: N/A

cpe:2.3:h:idemia:morphowave_compact:-
Idemia » Morphowave Sp » Version: N/A

cpe:2.3:h:idemia:morphowave_sp:-
Idemia » Morphowave Xp » Version: N/A

cpe:2.3:h:idemia:morphowave_xp:-
Idemia » Sigma Extreme » Version: N/A

cpe:2.3:h:idemia:sigma_extreme:-
Idemia » Sigma Lite+ » Version: N/A

cpe:2.3:h:idemia:sigma_lite+:-
Idemia » Sigma Lite » Version: N/A

cpe:2.3:h:idemia:sigma_lite:-
Idemia » Sigma Wide » Version: N/A

cpe:2.3:h:idemia:sigma_wide:-
Idemia » Visionpass » Version: N/A

cpe:2.3:h:idemia:visionpass:-
Idemia » Morphowave Compact Firmware » Version: N/A

cpe:2.3:o:idemia:morphowave_compact_firmware:-
Idemia » Morphowave Sp Firmware » Version: N/A

cpe:2.3:o:idemia:morphowave_sp_firmware:-
Idemia » Morphowave Xp Firmware » Version: N/A

cpe:2.3:o:idemia:morphowave_xp_firmware:-
Idemia » Sigma Extreme Firmware » Version: N/A

cpe:2.3:o:idemia:sigma_extreme_firmware:-
Idemia » Sigma Lite+ Firmware » Version: N/A

cpe:2.3:o:idemia:sigma_lite+_firmware:-
Idemia » Sigma Lite Firmware » Version: N/A

cpe:2.3:o:idemia:sigma_lite_firmware:-
Idemia » Sigma Wide Firmware » Version: N/A

cpe:2.3:o:idemia:sigma_wide_firmware:-
Idemia » Visionpass Firmware » Version: N/A

cpe:2.3:o:idemia:visionpass_firmware:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-33221

Products

Pricing

Contact Us