Kantech Gen1 ioSmart card reader
Priority LOW 33CWE-200Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- Information disclosure, Denial of service
- Confidentiality · integrity · availability
- Low · High · Low
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-200 and CWE-401.
Summary
An attacker with physical access to the Kantech Gen1 ioSmart card reader with firmware version prior to 1.07.02 in certain circumstances can recover the reader's communication memory between the card and reader.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.003 22nd percentileScored 2026-11-07
Fix Fixed ioSmart Gen1 (Sensormatic Electronics, a subsidiary of Johnson Controls, Inc.): 1.07.02
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Johnson Controls | ioSmart Gen1 | before 1.07.02 | 1.07.02 | Patch available | CNA |
- ioSmart Gen1 VendorJohnson Controls Affected before 1.07.02 Fixed in 1.07.02 Patch available CNA
CPE configurations NVD · 2
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:johnsoncontrols:iosmart_gen_1_firmware:*:*:*:*:*:*:*:* | before 1.07.02 | Vulnerable | Johnson Controls |
| cpe:2.3:h:johnsoncontrols:iosmart_gen_1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Johnson Controls |
- cpe:2.3:o:johnsoncontrols:iosmart_gen_1_firmware:*:*:*:*:*:*:*:* Versions before 1.07.02 Vulnerable ·Johnson Controls
- cpe:2.3:h:johnsoncontrols:iosmart_gen_1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Johnson Controls
Remediation
- Fix · CNA ioSmart Gen1 (Sensormatic Electronics, a subsidiary of Johnson Controls, Inc.) Fixed in 1.07.02
Timeline
- 2026-10-02 Threatist record created from CVE-2023-0248
- 2026-10-03 Alias added: GHSA-6ww3-v82p-jv78
References
Sources
- CVE-2023-0248 · CVE Program
- CVE-2023-0248 · NVD
- FIRST EPSS
- GHSA-6ww3-v82p-jv78 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences