CVSS 3.1
6.2 mediumCVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HCVE-2021-35520
Medium (6.2) in idemia. EPSS 0.3% chance of exploitation in the next 30 days.
A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows physically proximate authenticated attackers to achieve code execution, denial of services, and information disclosure via serial ports.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 27% of CVEs (scores of 2026-10-31)
- CWE
- CWE-787
- Published
- Modified
- Record from
- the NVD, synced
Affected
- idemia:morphowave_compact_mdpi-m_firmware
- idemia:morphowave_compact_mdpi_firmware
- idemia:visionpass_mdpi-m_firmware
- idemia:visionpass_mdpi_firmware
References
- https://biometricdevices.idemia.com/s/global-search/0696700000JJa0zAAD?sharing=true
- https://biometricdevices.idemia.com/s/global-search/0696700000JJa1nAAD?sharing=true
- https://www.idemia.com
- https://biometricdevices.idemia.com/s/global-search/0696700000JJa0zAAD?sharing=true
- https://biometricdevices.idemia.com/s/global-search/0696700000JJa1nAAD?sharing=true