CVEvulnerability

CVE-2021-35520

6.2 MEDIUM Published 2021-07-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-07-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.2 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-787

Description

A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows physically proximate authenticated attackers to achieve code execution, denial of services, and information disclosure via serial ports.

Affected configurations

• idemia morphowave compact mdpi firmware (< 2.6.2) • idemia morphowave compact mdpi-m firmware (< 2.6.2) • idemia visionpass mdpi firmware (< 2.6.2) • idemia visionpass mdpi-m firmware (< 2.6.2)

Related

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

References