by Kastro
Paper/Archive/CVE-2021-35522

CVE-2021-35522

mitre — A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma devices before 4.9.…

EPSS 4%CVSS 9.8
critical.is priorityof 100
47
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 89.6.896 × 2017.9No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma devices before 4.9.4, and MA VP MD devices before 4.9.7 allows remote attackers to achieve code execution, denial of services, and information disclosure via TCP/IP packets.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refidemia.comrefbiometricdevices.idemia.com/s/global-search/0696700000JJa0zAAD?sharing=truerefbiometricdevices.idemia.com/s/global-search/0696700000JJa1nAAD?sharing=true