9.8

CVE-2021-35522

A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma devices before 4.9.4, and MA VP MD devices before 4.9.7 allows remote attackers to achieve code execution, denial of services, and information disclosure via TCP/IP packets.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Idemia ≫ Visionpass Mdpi Firmware Version < 2.6.2
   Idemia ≫ Visionpass Mdpi Version -
Idemia ≫ Visionpass Mdpi-m Firmware Version < 2.6.2
   Idemia ≫ Visionpass Mdpi-m Version -
Idemia ≫ Visionpass Md Firmware Version -
   Idemia ≫ Visionpass Md Version 2.6.2
Idemia ≫ Morphowave Compact Md Firmware Version -
   Idemia ≫ Morphowave Compact Md Version 2.6.2
Idemia ≫ Sigma Lite Firmware Version -
   Idemia ≫ Sigma Lite Version 4.9.4
Idemia ≫ Sigma Lite+ Firmware Version -
   Idemia ≫ Sigma Lite+ Version 4.9.4
Idemia ≫ Sigma Wide Firmware Version -
   Idemia ≫ Sigma Wide Version 4.9.4
Idemia ≫ Sigma Extreme Firmware Version -
   Idemia ≫ Sigma Extreme Version 4.9.4
Idemia ≫ Ma Vp Md Firmware Version -
   Idemia ≫ Ma Vp Md Version 4.9.7
Idemia ≫ Visionpass Md Firmware Version -
   Idemia ≫ Visionpass Md Version 2.6.2
Idemia ≫ Morphowave Compact Md Firmware Version -
   Idemia ≫ Morphowave Compact Md Version 2.6.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.66% 0.882
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 9 10 8.5
AV:N/AC:L/Au:N/C:P/I:P/A:C
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://biometricdevices.idemia.com/s/global-search/0696700000JJa0zAAD?sharing=true
Patch
Vendor Advisory
https://biometricdevices.idemia.com/s/global-search/0696700000JJa1nAAD?sharing=true
Patch
Vendor Advisory
https://www.idemia.com
Product