{"id":"CVE-2023-0248","aliases":["EUVD-2023-12329","GHSA-6ww3-v82p-jv78"],"status":"published","title":"Kantech Gen1 ioSmart card reader","description":"An attacker with physical access to the Kantech Gen1 ioSmart card reader with firmware version prior to 1.07.02 in certain circumstances can recover the reader's communication memory between the card and reader.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.003,"percentile":0.22851,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200","CWE-401"],"published":"2023-12-14T20:57:33Z","modified":"2026-06-17T05:25:07Z","products":[{"vendor":"johnsoncontrols","product":"iosmart_gen_1_firmware"},{"vendor":"sensormatic electronics, a subsidiary of johnson controls, inc.","product":"iosmart gen1"}],"references":[{"url":"https://www.johnsoncontrols.com/cyber-solutions/security-advisories","tags":["x_transferred","Vendor Advisory"]},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-348-02","tags":["x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0248"},{"url":"https://github.com/advisories/GHSA-6ww3-v82p-jv78"}],"sources":{"cve":[{"id":"CVE-2023-0248","title":"Kantech Gen1 ioSmart card reader","description":"An attacker with physical access to the Kantech Gen1 ioSmart card reader with firmware version prior to 1.07.02 in certain circumstances can recover the reader's communication memory between the card and reader.\n\n","status":"published","published":"2023-12-14T20:57:33.625Z","modified":"2024-10-08T14:19:18.925Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L","level":"high","assessor":"cna"}],"cwes":["CWE-200","CWE-401"],"updated_at":"2026-11-02T14:35:35.580545Z"}],"euvd":[{"id":"EUVD-2023-12329","description":"An attacker with physical access to the Kantech Gen1 ioSmart card reader with firmware version prior to 1.07.02 in certain circumstances can recover the reader's communication memory between the card and reader.\n\n","status":"published","published":"2023-12-14T20:57:33Z","modified":"2024-10-08T14:19:18Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L","level":"high"}],"updated_at":"2026-11-03T00:27:45.808193Z"}],"ghsa":[{"id":"GHSA-6ww3-v82p-jv78","title":"An attacker with physical access to the Kantech Gen1 ioSmart card reader with firmware version...","description":"An attacker with physical access to the Kantech Gen1 ioSmart card reader with firmware version prior to 1.7.2 in certain circumstances can recover the reader's communication memory between the card and reader.\n\n","status":"published","published":"2023-12-14T21:31:16Z","modified":"2023-12-30T05:05:30Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L","level":"high"}],"cwes":["CWE-200","CWE-401"],"updated_at":"2026-11-02T14:55:18.128107Z"}],"nvd":[{"id":"CVE-2023-0248","description":"An attacker with physical access to the Kantech Gen1 ioSmart card reader with firmware version prior to 1.07.02 in certain circumstances can recover the reader's communication memory between the card and reader.\n\n","status":"published","published":"2023-12-14T21:15:07.553Z","modified":"2026-06-17T05:25:07.313Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L","level":"high","assessor":"secondary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200","CWE-401"],"updated_at":"2026-11-02T14:08:54.696438Z"}]}}