medium6.2
CVE-2021-35520
A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows physically proximate authenticated attack…
Impact
A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows physically proximate authenticated attackers to achieve code execution, denial of services, and information disclosure via serial ports.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Idemia | Morphowave Compact Mdpi Firmware | before 2.6.2 |
| Idemia | Morphowave Compact Mdpi-M Firmware | before 2.6.2 |
| Idemia | Visionpass Mdpi Firmware | before 2.6.2 |
| Idemia | Visionpass Mdpi-M Firmware | before 2.6.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://biometricdevices.idemia.com/s/global-search/0696700000JJa0zAAD?sharing=true
- https://biometricdevices.idemia.com/s/global-search/0696700000JJa1nAAD?sharing=true
- https://www.idemia.com
- https://biometricdevices.idemia.com/s/global-search/0696700000JJa0zAAD?sharing=true
- https://biometricdevices.idemia.com/s/global-search/0696700000JJa1nAAD?sharing=true
- https://www.idemia.com