CVE-2023-33222

CVSS 3.1 Score 6.8 of 10 (medium)

Details

Published Dec 15, 2023
Updated: Dec 28, 2023
CWE ID 121
CWE ID 787

Summary

CVE-2023-33222 is a vulnerability that affects contactless card handling. It is caused by the usage of a specific function that does not check the boundary on the data received while reading from the card, leading to a stack-based buffer overflow. This vulnerability has the potential to be exploited remotely, resulting in potential Remote Code Execution on the targeted device. The severity of this vulnerability is rated as medium, with a base score of 6.8 out of 10. The integrity and confidentiality impacts are high, while user interaction and privileges required are none. The attack vector is physical, and the availability impact is also high. Remediating this vulnerability requires ensuring that proper boundary checks are implemented when handling contactless cards to prevent buffer overflows and potential code execution exploits.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-33222 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options