CVE-2023-0248 – Kantech Gen1 ioSmart card reader

https://notcve.org/view.php?id=CVE-2023-0248

14 Dec 2023 — An attacker with physical access to the Kantech Gen1 ioSmart card reader with firmware version prior to 1.07.02 in certain circumstances can recover the reader's communication memory between the card and reader. Un atacante con acceso físico al lector de tarjetas Kantech Gen1 ioSmart con versión de firmware anterior a 1.7.2 en determinadas circunstancias puede recuperar la memoria de comunicación del lector entre la tarjeta y el lector. • https://www.cisa.gov/news-events/ics-advisories/icsa-23-348-02 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-401: Missing Release of Memory after Effective Lifetime •