Description
The Parameter Zone Read and Parameter Zone Write command handlers allow performing a Stack buffer overflow.
This could potentially lead to a Remote Code execution on the targeted device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IDEMIA | SIGMA Lite & Lite + | < 4.15.5 | 4.15.5 |
| IDEMIA | SIGMA Wide | < 4.15.5 | 4.15.5 |
| IDEMIA | SIGMA Extreme | < 4.15.5 | 4.15.5 |
| IDEMIA | MorphoWave Compact/XP | < 2.12.2 | 2.12.2 |
| IDEMIA | VisionPass | < 2.12.2 | 2.12.2 |
| IDEMIA | MorphoWave SP | < 1.2.7 | 1.2.7 |