CVE-2023-4667

🗓️ 28 Nov 2023 08:09:10Reported by IDEMIAType

The PAC Device web interface allows storage of malicious scripts, leading to unauthorized acces

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2023-4667	28 Nov 202311:47	–	circl
CNNVD	IDEMIA SIGMA Cross-Site Scripting Vulnerability	28 Nov 202300:00	–	cnnvd
Cvelist	CVE-2023-4667 Stored Cross Site Scripting in webserver administration	28 Nov 202308:09	–	cvelist
EUVD	EUVD-2023-54519	3 Oct 202520:07	–	euvd
NVD	CVE-2023-4667	28 Nov 202309:15	–	nvd
Prion	Input validation	28 Nov 202309:15	–	prion
Positive Technologies	PT-2023-30152 · Unknown · Pac Device	28 Nov 202300:00	–	ptsecurity
Vulnrichment	CVE-2023-4667 Stored Cross Site Scripting in webserver administration	28 Nov 202308:09	–	vulnrichment

NVD

Node

idemia sgima_lite_&_lite+_firmware

AND

idemia sgima_lite_&_lite+Match-

Node

idemia sigma_wide_firmware

AND

idemia sigma_wideMatch-

Node

idemia sigma_extreme_firmware

AND

idemia sigma_extremeMatch-

Node

idemia morphowave_compact_firmware

AND

idemia morphowave_compactMatch-

Node

idemia morphowave_sp_firmware

AND

idemia morphowave_spMatch-

Node

idemia visionpass_firmware

AND

idemia visionpassMatch-

Node

idemia morphowave_sp_firmware

AND

idemia morphowave_spMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "SIGMA Lite & Lite +",
    "vendor": "IDEMIA",
    "versions": [
      {
        "status": "affected",
        "version": "0"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "SIGMA Wide",
    "vendor": "IDEMIA",
    "versions": [
      {
        "status": "affected",
        "version": "0"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "SIGMA Extreme",
    "vendor": "IDEMIA",
    "versions": [
      {
        "status": "affected",
        "version": "0"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MorphoWave Compact/XP",
    "vendor": "IDEMIA",
    "versions": [
      {
        "status": "affected",
        "version": "0"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "VisionPass",
    "vendor": "IDEMIA",
    "versions": [
      {
        "status": "affected",
        "version": "0"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MorphoWave SP",
    "vendor": "IDEMIA",
    "versions": [
      {
        "status": "affected",
        "version": "0"
      }
    ]
  }
]

Source	Link
idemia	www.idemia.com/vulnerability-information

21 Nov 2024 08:35Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.14.8 - 8.1

EPSS0.00103

SSVC

CWE-79