Skip to content
OpenAdvisories
Medium · 4.9 CVE-2023-33217 EUVD-2023-37387GHSA-5x62-mg99-p2p2

Missing integrity check on upgrade package

Published Dec 15, 2023 · Updated Aug 2, 2024 · Assigned by IDEMIA

Description

By abusing a design flaw in the firmware upgrade mechanism of the impacted terminal it's possible to cause a permanent
denial of service for the terminal. the only way to recover the terminal is by sending back the terminal to the manufacturer

Affected products

VendorProductAffectedFixed
IDEMIA SIGMA Lite & Lite + < 4.15.5 4.15.5
IDEMIA SIGMA Wide < 4.15.5 4.15.5
IDEMIA SIGMA Extreme < 4.15.5 4.15.5
IDEMIA MorphoWave Compact/XP < 2.12.2 2.12.2
IDEMIA VisionPass < 2.12.2 2.12.2
IDEMIA MorphoWave SP < 1.2.7 1.2.7

References