Sigma Wide Firmware
CVE-2023-4667
MEDIUM
Severity by source
AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
1DescriptionNVD
The web interface of the PAC Device allows the device administrator user profile to store malicious scripts in some fields. The stored malicious script is then executed when the GUI is opened by any users of the webserver administration interface.
The root cause of the vulnerability is inadequate input validation and output encoding in the web administration interface component of the firmware.
This could lead to unauthorized access and data leakage
AnalysisAI
The web interface of the PAC Device allows the device administrator user profile to store malicious scripts in some fields. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified as Cross-Site Scripting (XSS) (CWE-79), which allows attackers to inject malicious scripts into web pages viewed by other users. The web interface of the PAC Device allows the device administrator user profile to store malicious scripts in some fields. The stored malicious script is then executed when the GUI is opened by any users of the webserver administration interface. The root cause of the vulnerability is inadequate input validation and output encoding in the web administration interface component of the firmware. This could lead to unauthorized access and data leakage Affected products include: Idemia Sgima Lite \& Lite\+ Firmware, Idemia Sigma Wide Firmware, Idemia Sigma Extreme Firmware, Idemia Morphowave Compact Firmware, Idemia Morphowave Sp Firmware.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Sanitize all user input, use Content-Security-Policy headers, encode output contextually (HTML, JS, URL). Use frameworks with built-in XSS protection.
More in Sigma Wide Firmware
View allWhen handling contactless cards, usage of a specific function to get additional information from the card which doesn't
When reading DesFire keys, the function that reads the card isn't properly checking the boundaries when copying internal
During the retrofit validation process, the firmware doesn't properly check the boundaries while copying some attributes
The handler of the retrofit validation command doesn't properly check the boundaries when performing certain validation
The Parameter Zone Read and Parameter Zone Write command handlers allow performing a Stack buffer overflow. Rated critic
A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma de
By abusing a design flaw in the firmware upgrade mechanism of the impacted terminal it's possible to cause a permanent d
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today