medium5.9
CVE-2021-35521
A path traversal in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows remote authenticated attackers to achieve …
Impact
A path traversal in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows remote authenticated attackers to achieve denial of services and information disclosure via TCP/IP packets.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Idemia | Morphowave Compact Mdpi Firmware | before 2.6.2 |
| Idemia | Morphowave Compact Mdpi-M Firmware | before 2.6.2 |
| Idemia | Visionpass Mdpi Firmware | before 2.6.2 |
| Idemia | Visionpass Mdpi-M Firmware | before 2.6.2 |
| Idemia | Visionpass Md Firmware | All versions |
| Idemia | Morphowave Compact Md Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://biometricdevices.idemia.com/s/global-search/0696700000JJa0zAAD?sharing=true
- https://biometricdevices.idemia.com/s/global-search/0696700000JJa1nAAD?sharing=true
- https://www.idemia.com
- https://biometricdevices.idemia.com/s/global-search/0696700000JJa0zAAD?sharing=true
- https://biometricdevices.idemia.com/s/global-search/0696700000JJa1nAAD?sharing=true
- https://www.idemia.com