Описание
An attacker with physical access to the Kantech Gen1 ioSmart card reader with firmware version prior to 1.07.02 in certain circumstances can recover the reader's communication memory between the card and reader.
Ссылки
- Third Party AdvisoryUS Government Resource
- Vendor Advisory
- Third Party AdvisoryUS Government Resource
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.07.02 (исключая)
Одновременно
cpe:2.3:o:johnsoncontrols:iosmart_gen_1_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:johnsoncontrols:iosmart_gen_1:-:*:*:*:*:*:*:*
EPSS
Процентиль: 27%
0.00098
Низкий
7.5 High
CVSS3
5.3 Medium
CVSS3
Дефекты
CWE-200
CWE-401
Связанные уязвимости
CVSS3: 7.5
github
около 2 лет назад
An attacker with physical access to the Kantech Gen1 ioSmart card reader with firmware version prior to 1.7.2 in certain circumstances can recover the reader's communication memory between the card and reader.
EPSS
Процентиль: 27%
0.00098
Низкий
7.5 High
CVSS3
5.3 Medium
CVSS3
Дефекты
CWE-200
CWE-401