Critical severity9.1NVD Advisory· Published Dec 15, 2023· Updated Jun 17, 2026

CVE-2023-33220

Description

During the retrofit validation process, the firmware doesn't properly check the boundaries while copying some attributes to check. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted device

Affected products

Idemia/Sigma Lite\+ Firmware3 versions
cpe:2.3:o:idemia:sigma_lite_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:idemia:sigma_lite_firmware:*:*:*:*:*:*:*:*range: <4.15.5
- cpe:2.3:o:idemia:sigma_lite\+_firmware:*:*:*:*:*:*:*:*range: <4.15.5
- (no CPE)range: 0
Idemia/Sigma Extreme Firmware2 versions
cpe:2.3:o:idemia:sigma_extreme_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:idemia:sigma_extreme_firmware:*:*:*:*:*:*:*:*range: <4.15.5
- (no CPE)range: 0
Idemia/Sigma Wide Firmware2 versions
cpe:2.3:o:idemia:sigma_wide_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:idemia:sigma_wide_firmware:*:*:*:*:*:*:*:*range: <4.15.5
- (no CPE)range: 0
Idemia/Morphowave Compact Firmware
cpe:2.3:o:idemia:morphowave_compact_firmware:*:*:*:*:*:*:*:*
Range: <2.12.2
Idemia/Morphowave Xp Firmware
cpe:2.3:o:idemia:morphowave_xp_firmware:*:*:*:*:*:*:*:*
Range: <2.12.2
Idemia/Visionpass Firmware
cpe:2.3:o:idemia:visionpass_firmware:*:*:*:*:*:*:*:*
Range: <2.12.2
Idemia/Morphowave Sp Firmware2 versions
cpe:2.3:o:idemia:morphowave_sp_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:idemia:morphowave_sp_firmware:*:*:*:*:*:*:*:*range: <1.2.7
- (no CPE)range: 0
Idemia/Morpho Wave Compactcpe-rescue
Range: 0
Idemia/VisionPasscpe-rescue
Range: 0
Idemia/firmwarellm-create

Patches

Vulnerability mechanics

References

www.idemia.com/wp-content/uploads/2023/11/Security-Advisory-SA-2023-05-2.pdfnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.591
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000