VulnerabilityModified
CVE-2021-35520
A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows physically proximate authenticated attackers to achieve code execution, denial of services, and information disclosure via serial ports.
MEDIUM 6.2EPSS 0.34%
Does this matter?
Lower severity and a low EPSS score (0.34%). Track it; it rarely justifies an emergency change on its own.
Description
A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows physically proximate authenticated attackers to achieve code execution, denial of services, and information disclosure via serial ports.
- CVSS 3.1
- 6.2 MEDIUMCVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.34% probability · 27th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-787
- Affected
- idemia/morphowave compact mdpi firmware · idemia/morphowave compact mdpi-m firmware · idemia/visionpass mdpi firmware · idemia/visionpass mdpi-m firmware
- Source
- cve@mitre.org
References
- https://biometricdevices.idemia.com/s/global-search/0696700000JJa0zAAD?sharing=truePatch, Vendor Advisory
- https://biometricdevices.idemia.com/s/global-search/0696700000JJa1nAAD?sharing=truePatch, Vendor Advisory
- https://www.idemia.comProduct
- https://biometricdevices.idemia.com/s/global-search/0696700000JJa0zAAD?sharing=truePatch, Vendor Advisory
- https://biometricdevices.idemia.com/s/global-search/0696700000JJa1nAAD?sharing=truePatch, Vendor Advisory
- https://www.idemia.comProduct
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.