Visionpass
Vendor:
First CVE: Nov 28, 2023 · Active for 2 years
7
Total CVEs
More Total CVEs than 83% of tracked products
7.0
Avg CVEs / Year
Higher CVE frequency than 92% of tracked products
8.8
Avg CVSS
Higher Avg CVSS than 78% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Visionpass over time
Volume of CVEsAvg CVSS Base Score
First CVE
Nov 28, 2023
2 years ago
Most Recent CVE
Dec 15, 2023
953 days ago
CVE Severity & Scoring
Visionpass7 CVEs
14%
14%
71%
All CVEs352,427 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network7 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low7 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None6 (85.7%)
Unknown0 (0.0%)
Required1 (14.3%)
Privileges Required
Low0 (0.0%)
High1 (14.3%)
None6 (85.7%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-33219CRITICAL
The handler of the retrofit validation command doesn't properly check the boundaries when performing certain validation
operations. This allows a stack-based buffer overflow | Dec 15, 2023 | 9.8 | 30 | NO | NO |
CVE-2023-33220CRITICAL
During the retrofit validation process, the firmware doesn't properly check the boundaries while copying some attributes
to check. This allows a stack-based buffer overflow | Dec 15, 2023 | 9.8 | 29 | NO | NO |
CVE-2023-33222CRITICAL
When handling contactless cards, usage of a specific function to get additional information from the card which doesn't
check the boundary on the data received while read | Dec 15, 2023 | 9.8 | 28 | NO | NO |
CVE-2023-33218CRITICAL
The Parameter Zone Read and Parameter Zone Write command handlers allow performing a Stack buffer overflow.
This could potentially lead to a Remote Code execution on the target | Dec 15, 2023 | 9.8 | 28 | NO | NO |
CVE-2023-33221CRITICAL
When reading DesFire keys, the function that reads the card isn't properly checking the boundaries when copying
internally the data received. This allows a heap based buf | Dec 15, 2023 | 9.8 | 27 | NO | NO |
CVE-2023-33217HIGH
By abusing a design flaw in the firmware upgrade mechanism of the impacted terminal it's possible to cause a permanent
denial of service for the terminal. the only way to recover | Dec 15, 2023 | 7.5 | 20 | NO | NO |
CVE-2023-4667MEDIUM
The web interface of the PAC Device allows the device administrator user profile to store malicious scripts in some fields. The stored malicious script is then executed when the G | Nov 28, 2023 | 4.8 | 17 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (7 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (7 CVEs).
Media Mentions
Signals from CVEs in this product scope (7 CVEs).
Top CNAs Publishing CVEs For Visionpass
Top CWEs
Versions
No cataloged versions.