60
CVE-2021-35522
—CVSS 3.1
9.8 critical
EPSS
4%p89
Published
()
Modified
Description
A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma devices before 4.9.4, and MA VP MD devices before 4.9.7 allows remote attackers to achieve code execution, denial of services, and information disclosure via TCP/IP packets.
- Vendors
- idemia
- Products
- morphowave compact mdpi firmware, morphowave compact mdpi-m firmware, visionpass mdpi firmware, visionpass mdpi-m firmware, visionpass md firmware, morphowave compact md firmware, sigma lite firmware, sigma lite\+ firmware, sigma wide firmware, sigma extreme firmware, ma vp md firmware
- Weakness
- CWE-787
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H