PT-2023-16111 · Kantech · Kantech Gen1 Iosmart Card Reader

Colin Oflynn · Publicado 2023-12-14 · Atualizado 2023-12-21 · CVE-2023-0248

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L

Name of the Vulnerable Software and Affected Versions Kantech Gen1 ioSmart card reader versions prior to 1.07.02

Description An attacker with physical access to the Kantech Gen1 ioSmart card reader in certain circumstances can recover the reader's communication memory between the card and reader.

Recommendations For versions prior to 1.07.02, update the firmware to version 1.07.02 or later to resolve the issue.

Correção

Memory Leak

Information Disclosure

Enumeração de Fraquezas

CWE-401

CWE-200

Identificadores relacionados

CVE-2023-0248

Produtos afetados

Kantech Gen1 Iosmart Card Reader

Referências · 7

• https://t.me/cvenotify/63839 · Publicação no Telegram
• https://t.me/cvenotify/63845 · Publicação no Telegram
• https://cisa.gov/news-events/ics-advisories/icsa-23-348-02 · Nota
• https://osv.dev/vulnerability/CVE-2023-0248 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1735407770692706737 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-0248 · Nota de Segurança
• https://johnsoncontrols.com/cyber-solutions/security-advisories · Aviso do Fabricante