CVEvulnerability

CVE-2021-35522

9.8 CRITICAL Published 2021-07-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-07-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
9.0 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:C
Weaknesses
CWE-787

Description

A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma devices before 4.9.4, and MA VP MD devices before 4.9.7 allows remote attackers to achieve code execution, denial of services, and information disclosure via TCP/IP packets.

Affected configurations

• idemia morphowave compact mdpi firmware (< 2.6.2) • idemia morphowave compact mdpi-m firmware (< 2.6.2) • idemia visionpass mdpi firmware (< 2.6.2) • idemia visionpass mdpi-m firmware (< 2.6.2) • idemia visionpass md firmware • idemia morphowave compact md firmware • idemia sigma lite firmware • idemia sigma lite\+ firmware • idemia sigma wide firmware • idemia sigma extreme firmware • idemia ma vp md firmware

Related

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

References