CVEs published by IDEMIA

CVEs published by IDEMIA (CVE Numbering Authority). 7 tracked.

CVE-2023-4667 HIGH 8.1 MITIGATE MITIGATE The web interface of the PAC Device allows the device administrator user profile to store malicious scripts i
CVE-2023-33222 MEDIUM 6.8 UPGRADE UPGRADE When handling contactless cards, usage of a specific function to get additional information from the
CVE-2023-33221 MEDIUM 6.8 UPGRADE UPGRADE When reading DesFire keys, the function that reads the card isn't properly checking the boundaries wh
CVE-2023-33220 CRITICAL 9.1 UPGRADE UPGRADE During the retrofit validation process, the firmware doesn't properly check the boundaries while copyin
CVE-2023-33219 CRITICAL 9.1 UPGRADE UPGRADE The handler of the retrofit validation command doesn't properly check the boundaries when performing cert
CVE-2023-33218 CRITICAL 9.1 UPGRADE UPGRADE The Parameter Zone Read and Parameter Zone Write command handlers allow performing a Stack buffer overflow
CVE-2023-33217 HIGH 7.5 UPGRADE UPGRADE By abusing a design flaw in the firmware upgrade mechanism of the impacted terminal it's possible to cause a