Login Request a demo
Critical severity · published Jul 22, 2021
CVE-2021-35522
A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma devices before 4.9.4, and MA VP MD devices before 4.9.7…
9.8
CVSS
3.7%
EPSS
No
On KEV
Description
A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma devices before 4.9.4, and MA VP MD devices before 4.9.7 allows remote attackers to achieve code execution, denial of services, and information disclosure via TCP/IP packets.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.7% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MV
MA VP MD Firmware · Idemia
All versions, or not specified · source: NVD
MC
Morphowave Compact MD Firmware · Idemia
All versions, or not specified · source: NVD
MC
Morphowave Compact Mdpi Firmware · Idemia
before 2.6.2 · source: NVD
MC
Morphowave Compact Mdpi-m Firmware · Idemia
before 2.6.2 · source: NVD
SE
Sigma Extreme Firmware · Idemia
All versions, or not specified · source: NVD
SL
Sigma Lite Firmware · Idemia
All versions, or not specified · source: NVD
SL
Sigma Lite+ Firmware · Idemia
All versions, or not specified · source: NVD
SW
Sigma Wide Firmware · Idemia
All versions, or not specified · source: NVD
VM
Visionpass MD Firmware · Idemia
All versions, or not specified · source: NVD
VM
Visionpass Mdpi Firmware · Idemia
before 2.6.2 · source: NVD
VM
Visionpass Mdpi-m Firmware · Idemia
before 2.6.2 · source: NVD
Affected product
MV
MA VP MD Firmware
Idemia
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-35522
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-35522
Patch
https://biometricdevices.idemia.com/s/global-search/0696700000JJa0zAAD?sharing=true
Patch
https://biometricdevices.idemia.com/s/global-search/0696700000JJa1nAAD?sharing=true
Product
https://www.idemia.com