Vulnerability Intelligence Report
Kantech Gen1 ioSmart card reader
CVE-2023-0248
An attacker with physical access to the Kantech Gen1 ioSmart card reader with firmware version prior to 1.07.02 in certain circumstances can recover the reader's communication memory between the card and reader.
No Active Exploit Signals
CVSS Base Score
7.5
HIGH
Exploitability:1.7
Impact Score:5.3
EPSS Probability:0.30%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Sensormatic Electronics, a subsidiary of Johnson Controls, Inc. | ioSmart Gen1 | 0 < 1.07.02 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.300%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Johnson Controls · Vendor · USA |
| Reserved | 2023-01-12T15:26:20 |
| Published | 2023-12-14T20:57:33 |
| Patch Date | 2023-12-14 |
| Last Updated | 2024-10-08T14:19:18 |
Community Chatter & Buzz