CVE-2021-35520
EUVD-2021-2215622.07.2021, 12:15
A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows physically proximate authenticated attackers to achieve code execution, denial of services, and information disclosure via serial ports.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| idemia | morphowave_compact_mdpi_firmware | 𝑥 < 2.6.2 |
| idemia | morphowave_compact_mdpi-m_firmware | 𝑥 < 2.6.2 |
| idemia | visionpass_mdpi_firmware | 𝑥 < 2.6.2 |
| idemia | visionpass_mdpi-m_firmware | 𝑥 < 2.6.2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References