CVE-2023-0248CWE-200CWE-401

Kantech Gen1 ioSmart card reader

High · published December 14, 2023

CVSS v3.1
7.5
EPSS
0%
Percentile
21.5
In the wild
Unconfirmed
What it is

An attacker with physical access to the Kantech Gen1 ioSmart card reader with firmware version prior to 1.07.02 in certain circumstances can recover the reader's communication memory between the card and reader.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00300 · 21.5th percentile
Weaknesses
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor; CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2023-12-14T20:57Z
EPSS history
Timeline
  • 14 DEC 20:57Z
    Kantech Gen1 ioSmart card reader
    cvelistv5