CVE-2023-4667 Stored Cross Site Scripting in webserver administration
Attackers can inject malicious scripts into the web administration interface, leading to unauthorized access and data leakage for other users.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2023-4667?
CVE-2023-4667 is a high-severity cross-site scripting vulnerability in IDEMIA MorphoWave Compact/XP, published on 28 Nov 2023. An attacker needs administrator access to exploit it, and only if a user opens a file or follows a link.
Official description
The web interface of the PAC Device allows the device administrator user profile to store malicious scripts in some fields. The stored malicious script is then executed when the GUI is opened by any users of the webserver administration interface.
The root cause of the vulnerability is inadequate input validation and output encoding in the web administration interface component of the firmware.
This could lead to unauthorized access and data leakage
Weakness: CWE-79
Which versions are affected by CVE-2023-4667?
It affects 6 products.
Products include Idemia Morphowave Compact Firmware, Idemia Morphowave Sp Firmware, Idemia Sgima Lite \& Lite\+ Firmware, Idemia Sigma Extreme Firmware, Idemia Sigma Wide Firmware, Idemia Visionpass Firmware.
How do I fix CVE-2023-4667?
No fix has been published for CVE-2023-4667 yet. Limit exposure of the affected software until one is available.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is CVE-2023-4667 being exploited?
There is no known exploitation of CVE-2023-4667 in the wild and no public exploit code.
Other vulnerabilities in IDEMIA MorphoWave Compact/XP
- CVE-2023-33218 Stack Buffer Overflow in a binary run at upgrade startup
- CVE-2023-33219 Stack Buffer Overflow when checking retrofit package
- CVE-2023-33220 Stack Buffer Overflow when checking some attributes during retrofit
- CVE-2023-33217 Missing integrity check on upgrade package
- CVE-2023-33221 Heap Buffer Overflow when reading DESFire card
Sources
Also known as GHSA-5585-c8pm-rcfv.