CVE-2023-0248

—

CVSS 3.1

5.3 medium

EPSS

<1%p22

Published

Dec 14, 2023 (Dec 14, 2023)

Modified

Jun 17, 2026

Description

An attacker with physical access to the Kantech Gen1 ioSmart card reader with firmware version prior to 1.07.02 in certain circumstances can recover the reader's communication memory between the card and reader.

Vendors: johnsoncontrols
Products: iosmart gen 1 firmware
Weakness: CWE-200, CWE-401
Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.