Vulnerabilities > CVE-2023-0248 - Memory Leak vulnerability in Johnsoncontrols Iosmart GEN 1 Firmware

047910
CVSS 5.3 - MEDIUM
Attack vector
ADJACENT_NETWORK
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
high complexity
johnsoncontrols
CWE-401

Summary

An attacker with physical access to the Kantech Gen1 ioSmart card reader with firmware version prior to 1.07.02 in certain circumstances can recover the reader's communication memory between the card and reader.

Vulnerable Configurations

Part Description Count
OS
Johnsoncontrols
1
Hardware
Johnsoncontrols
1