ID
Vendor
Idemia
69
CVEs
0
On KEV
0
New 30D
Products
SE9.8
Sigma Extreme Firmware
Idemia
8 CVEs0 on KEV0 new
SW9.8
Sigma Wide Firmware
Idemia
8 CVEs0 on KEV0 new
MC9.8
Morphowave Compact Firmware
Idemia
7 CVEs0 on KEV0 new
MS9.8
Morphowave SP Firmware
Idemia
7 CVEs0 on KEV0 new
SL9.8
Sigma Lite Firmware
Idemia
7 CVEs0 on KEV0 new
VF9.8
Visionpass Firmware
Idemia
7 CVEs0 on KEV0 new
MX9.8
Morphowave XP Firmware
Idemia
6 CVEs0 on KEV0 new
MC9.8
Morphowave Compact Mdpi Firmware
Idemia
3 CVEs0 on KEV0 new
MC9.8
Morphowave Compact Mdpi-m Firmware
Idemia
3 CVEs0 on KEV0 new
VM9.8
Visionpass Mdpi Firmware
Idemia
3 CVEs0 on KEV0 new
VM9.8
Visionpass Mdpi-m Firmware
Idemia
3 CVEs0 on KEV0 new
MC9.8
Morphowave Compact MD Firmware
Idemia
2 CVEs0 on KEV0 new
VM9.8
Visionpass MD Firmware
Idemia
2 CVEs0 on KEV0 new
MV9.8
MA VP MD Firmware
Idemia
1 CVEs0 on KEV0 new
M17.8
Mso 1300 Firmware
Idemia
1 CVEs0 on KEV0 new
SL4.8
Sgima Lite & Lite+ Firmware
Idemia
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-33222 | SL Sigma Lite Firmware Idemia | 9.8 | Dec 15 | When handling contactless cards, usage of a specific function to get additional information from the card which doesn't check the boundary on the data received while reading |
| CVE-2023-33221 | SL Sigma Lite Firmware Idemia | 9.8 | Dec 15 | When reading DesFire keys, the function that reads the card isn't properly checking the boundaries when copying internally the data received |
| CVE-2023-33220 | SL Sigma Lite Firmware Idemia | 9.8 | Dec 15 | During the retrofit validation process, the firmware doesn't properly check the boundaries while copying some attributes to check |
| CVE-2023-33219 | SL Sigma Lite Firmware Idemia | 9.8 | Dec 15 | The handler of the retrofit validation command doesn't properly check the boundaries when performing certain validation operations |
| CVE-2023-33218 | SL Sigma Lite Firmware Idemia | 9.8 | Dec 15 | The Parameter Zone Read and Parameter Zone Write command handlers allow performing a Stack buffer overflow |
| CVE-2023-33217 | SL Sigma Lite Firmware Idemia | 7.5 | Dec 15 | By abusing a design flaw in the firmware upgrade mechanism of the impacted terminal it's possible to cause a permanent denial of service for the terminal |
| CVE-2023-4667 | SL Sgima Lite & Lite+ Firmware Idemia | 4.8 | Nov 28 | The web interface of the PAC Device allows the device administrator user profile to store malicious scripts in some fields |
| CVE-2021-35522 | MC Morphowave Compact Mdpi Firmware Idemia | 9.8 | Jul 22 | A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma devices before 4.9.4, and MA VP MD devices before 4.9.7… |
| CVE-2021-35521 | MC Morphowave Compact Mdpi Firmware Idemia | 5.9 | Jul 22 | A path traversal in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows remote authenticated attackers to achieve denial of services… |
| CVE-2021-35520 | MC Morphowave Compact Mdpi Firmware Idemia | 6.2 | Jul 22 | A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows physically proximate authenticated attackers to achieve code… |
| CVE-2017-15567 | M1 Mso 1300 Firmware Idemia | 7.8 | Oct 23 | The certificate import component in IDEMIA (formerly Morpho) MorphoSmart 1300 Series (aka MSO 1300 Series) devices allows local users to obtain a command shell, and consequently… |