Description (CNA)
HiCOS Citizen verification component has a stack-based buffer overflow vulnerability due to insufficient parameter length validation. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate system command or disrupt service.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| HINET / HiCOS Citizen verification component - Stack Buffer Overflow | affected libHicos_p11v1.so CHT PKCS#11 3.0.3.30306 |
| HINET / HiCOS Citizen verification component - Stack Buffer Overflow | affected HiCOSPKCS11.dll CHT PKCS#11 3.1.0.00002 |
| HINET / HiCOS Citizen verification component - Stack Buffer Overflow | affected libHicos_p11v1.dylib CHT PKCS#11 3.0.3.30404 |
CWE
CWE-787
References
ADP enrichment
No English description supplied.