Critical severity9.1NVD Advisory· Published Dec 15, 2023· Updated Jun 17, 2026

CVE-2023-33218

Description

The Parameter Zone Read and Parameter Zone Write command handlers allow performing a Stack buffer overflow. This could potentially lead to a Remote Code execution on the targeted device.

Affected products

Idemia/Sigma Lite\+ Firmwarecpe-rescue3 versions
0+ 2 more
- (no CPE)range: 0
- cpe:2.3:o:idemia:sigma_lite_firmware:*:*:*:*:*:*:*:*range: <4.15.5
- cpe:2.3:o:idemia:sigma_lite\+_firmware:*:*:*:*:*:*:*:*range: <4.15.5
Idemia/Sigma Wide Firmwarecpe-rescue2 versions
0+ 1 more
- (no CPE)range: 0
- cpe:2.3:o:idemia:sigma_wide_firmware:*:*:*:*:*:*:*:*range: <4.15.5
Idemia/Sigma Extreme Firmwarecpe-rescue2 versions
0+ 1 more
- (no CPE)range: 0
- cpe:2.3:o:idemia:sigma_extreme_firmware:*:*:*:*:*:*:*:*range: <4.15.5
Idemia/Morphowave Sp Firmwarecpe-rescue2 versions
0+ 1 more
- (no CPE)range: 0
- cpe:2.3:o:idemia:morphowave_sp_firmware:*:*:*:*:*:*:*:*range: <1.2.7
Idemia/Morphowave Compact Firmware
cpe:2.3:o:idemia:morphowave_compact_firmware:*:*:*:*:*:*:*:*
Range: <2.12.2
Idemia/Morphowave Xp Firmware
cpe:2.3:o:idemia:morphowave_xp_firmware:*:*:*:*:*:*:*:*
Range: <2.12.2
Idemia/Visionpass Firmware
cpe:2.3:o:idemia:visionpass_firmware:*:*:*:*:*:*:*:*
Range: <2.12.2
Idemia/Morpho Wave Compactcpe-rescue
Range: 0
Idemia/VisionPasscpe-rescue
Range: 0
Idemia/Parameter Zonellm-create

Patches

Vulnerability mechanics

References

www.idemia.com/wp-content/uploads/2023/11/Security-Advisory-SA-2023-05-2.pdfnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.591
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000