CVE-2023-33217

published 2023-12-15

CVE-2023-33217: By abusing a design flaw in the firmware upgrade mechanism of the impacted terminal it's possible to cause a permanent denial of service for the terminal. the…

Priority P3 37 high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

By abusing a design flaw in the firmware upgrade mechanism of the impacted terminal it's possible to cause a permanent
denial of service for the terminal. the only way to recover the terminal is by sending back the terminal to the manufacturer

Affected

14 ranges

Vendor	Product	Version range	Fixed in
idemia	morphowave_compact_firmware	< 2.12.2	2.12.2
idemia	morphowave_compact_xp	< 2.12.2	2.12.2
idemia	morphowave_sp	< 1.2.7	1.2.7
idemia	morphowave_sp_firmware	< 1.2.7	1.2.7
idemia	morphowave_xp_firmware	< 2.12.2	2.12.2
idemia	sigma_extreme	< 4.15.5	4.15.5
idemia	sigma_extreme_firmware	< 4.15.5	4.15.5
idemia	sigma_lite_+_firmware	< 4.15.5	4.15.5
idemia	sigma_lite_firmware	< 4.15.5	4.15.5
idemia	sigma_lite_lite	< 4.15.5	4.15.5
idemia	sigma_wide	< 4.15.5	4.15.5
idemia	sigma_wide_firmware	< 4.15.5	4.15.5
idemia	visionpass	< 2.12.2	2.12.2
idemia	visionpass_firmware	< 2.12.2	2.12.2

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20