CVE-2021-35522
22.07.2021, 12:15
A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma devices before 4.9.4, and MA VP MD devices before 4.9.7 allows remote attackers to achieve code execution, denial of services, and information disclosure via TCP/IP packets.Enginsight
| Vendor | Product | Version |
|---|---|---|
| idemia | morphowave_compact_mdpi_firmware | 𝑥 < 2.6.2 |
| idemia | morphowave_compact_mdpi-m_firmware | 𝑥 < 2.6.2 |
| idemia | visionpass_mdpi_firmware | 𝑥 < 2.6.2 |
| idemia | visionpass_mdpi-m_firmware | 𝑥 < 2.6.2 |
| idemia | visionpass_md_firmware | - |
| idemia | morphowave_compact_md_firmware | - |
| idemia | sigma_lite_firmware | - |
| idemia | sigma_lite\+_firmware | - |
| idemia | sigma_wide_firmware | - |
| idemia | sigma_extreme_firmware | - |
| idemia | ma_vp_md_firmware | - |
| idemia | visionpass_md_firmware | - |
| idemia | morphowave_compact_md_firmware | - |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References