CVE-2023-33217

🗓️ 15 Dec 2023 10:45:30Reported by IDEMIAType

Abusing design flaw in firmware upgrade causes permanent denial of service for impacted termina

Reporter	Title	Published	Views	Family All 7
CNNVD	WordPress Plugin SIGMA Lite & Lite+ Security Vulnerability	15 Dec 202300:00	–	cnnvd
Cvelist	CVE-2023-33217 Missing integrity check on upgrade package	15 Dec 202310:45	–	cvelist
EUVD	EUVD-2023-37387	3 Oct 202520:07	–	euvd
NVD	CVE-2023-33217	15 Dec 202311:15	–	nvd
OSV	CVE-2023-33217	15 Dec 202311:15	–	osv
Prion	Code injection	15 Dec 202311:15	–	prion
RedhatCVE	CVE-2023-33217	23 May 202502:03	–	redhatcve

NVD

Node

idemia sigma_lite_firmwareRange<4.15.5

AND

idemia sigma_liteMatch-

Node

idemia sigma_lite+_firmwareRange<4.15.5

AND

idemia sigma_lite+Match-

Node

idemia sigma_extreme_firmwareRange<4.15.5

AND

idemia sigma_extremeMatch-

Node

idemia sigma_wide_firmwareRange<4.15.5

AND

idemia sigma_wideMatch-

Node

idemia morphowave_compact_firmwareRange<2.12.2

AND

idemia morphowave_compactMatch-

Node

idemia morphowave_xp_firmwareRange<2.12.2

AND

idemia morphowave_xpMatch-

Node

idemia visionpass_firmwareRange<2.12.2

AND

idemia visionpassMatch-

Node

idemia morphowave_sp_firmwareRange<1.2.7

AND

idemia morphowave_spMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "SIGMA Lite & Lite +",
    "vendor": "IDEMIA",
    "versions": [
      {
        "lessThan": "4.15.5",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "SIGMA Wide",
    "vendor": "IDEMIA",
    "versions": [
      {
        "lessThan": "4.15.5",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "SIGMA Extreme",
    "vendor": "IDEMIA",
    "versions": [
      {
        "lessThan": "4.15.5",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MorphoWave Compact/XP",
    "vendor": "IDEMIA",
    "versions": [
      {
        "lessThan": "2.12.2",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "VisionPass",
    "vendor": "IDEMIA",
    "versions": [
      {
        "lessThan": "2.12.2",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MorphoWave SP",
    "vendor": "IDEMIA",
    "versions": [
      {
        "lessThan": "1.2.7",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
idemia	www.idemia.com/wp-content/uploads/2023/11/Security-Advisory-SA-2023-05-2.pdf

21 Nov 2024 08:05Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.17.5

EPSS0.0012

CWE-20