critical9.8
CVE-2021-35522
A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma devices before 4.9.4, and MA VP MD device…
Impact
A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma devices before 4.9.4, and MA VP MD devices before 4.9.7 allows remote attackers to achieve code execution, denial of services, and information disclosure via TCP/IP packets.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Idemia | Morphowave Compact Mdpi Firmware | before 2.6.2 |
| Idemia | Morphowave Compact Mdpi-M Firmware | before 2.6.2 |
| Idemia | Visionpass Mdpi Firmware | before 2.6.2 |
| Idemia | Visionpass Mdpi-M Firmware | before 2.6.2 |
| Idemia | Visionpass Md Firmware | All versions |
| Idemia | Morphowave Compact Md Firmware | All versions |
| Idemia | Sigma Lite Firmware | All versions |
| Idemia | Sigma Lite\+ Firmware | All versions |
| Idemia | Sigma Wide Firmware | All versions |
| Idemia | Sigma Extreme Firmware | All versions |
| Idemia | Ma Vp Md Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://biometricdevices.idemia.com/s/global-search/0696700000JJa0zAAD?sharing=true
- https://biometricdevices.idemia.com/s/global-search/0696700000JJa1nAAD?sharing=true
- https://www.idemia.com
- https://biometricdevices.idemia.com/s/global-search/0696700000JJa0zAAD?sharing=true
- https://biometricdevices.idemia.com/s/global-search/0696700000JJa1nAAD?sharing=true
- https://www.idemia.com