CVE-2021-35520
Medium
Description
A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows physically proximate authenticated attackers to achieve code execution, denial of services, and information disclosure via serial ports.
SeverityMedium
CVSS6.2
Exploit probability—
ProductIdemia Visionpass Mdpi Firmware
PublishedJul 22, 2021
First seenJul 22, 2021
How to fix
Update
- idemia visionpass_mdpi_firmware2.6.2 or later
- idemia morphowave_compact_mdpi_firmware2.6.2 or later
- idemia morphowave_compact_mdpi-m_firmware2.6.2 or later
- idemia visionpass_mdpi-m_firmware2.6.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| idemia visionpass_mdpi_firmware | v < 2.6.2 | 2.6.2 |
| idemia morphowave_compact_mdpi_firmware | v < 2.6.2 | 2.6.2 |
| idemia morphowave_compact_mdpi-m_firmware | v < 2.6.2 | 2.6.2 |
| idemia visionpass_mdpi-m_firmware | v < 2.6.2 | 2.6.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.