CVE-2023-33221

The CVE-2023-33221 issue is a boundary-check flaw in the DesFire card reading function that copies internal data, causing a heap-based buffer overflow and potential remote code execution. Reported across multiple sources (e.g., PT-Security; Red Hat; NVD), it specifically notes risk when the Defau...

CVE-2023-4667

CVE-2023-4667 affects the PAC Device web interface, where the device administrator can store malicious scripts in form fields. The stored scripts are executed when the GUI is opened by users of the webserver administration interface. Root cause: inadequate input validation and output encoding in ...

CVE-2023-33222

CVE-2023-33222 describes a stack-based buffer overflow when reading DESFire contactless cards due to a function that does not check data boundaries. Affected context is described as a card-reader/readerStack overflow leading to potential Remote Code Execution on the targeted device. Exploitation ...

CVE-2023-33220

CVE-2023-33220 concerns a vulnerability in firmware during the retrofit validation process where boundaries are not properly checked when copying attributes. This results in a stack-based buffer overflow, potentially enabling Remote Code Execution on the targeted device. The vulnerability is desc...

CVE-2023-33217

The CVE-2023-33217 entry describes a design flaw in the firmware upgrade mechanism of the affected terminal, enabling a permanent denial of service or degraded operation. Affected: the terminal’s firmware upgrade process (no vendor/product/version details provided). Root cause: a flaw in the upgr...

CVE-2023-33218

CVE-2023-33218 involves a stack buffer overflow in the Parameter Zone Read/Write command handlers, potentially enabling Remote Code Execution on affected devices. The primary sources (NVD, Red Hat, CVE lists) describe a network-accessible vulnerability with high/severe impact (Confidentiality/Int...

CVE-2023-33219

Summary: CVE-2023-33219 corresponds to a vulnerability where the handler of the retrofit validation command fails to properly check boundaries during certain validation operations, enabling a stack-based buffer overflow and potentially Remote Code Execution on the targeted device. The connected d...