CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2021-35522
Critical (9.8) in idemia. EPSS 3.7% chance of exploitation in the next 30 days.
A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma devices before 4.9.4, and MA VP MD devices before 4.9.7 allows remote attackers to achieve code execution, denial of services, and information disclosure via TCP/IP packets.
Severity
- EPSS
- 3.7% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
- CWE
- CWE-787
- Published
- Modified
- Record from
- the NVD, synced
Affected
- idemia:ma_vp_md_firmware
- idemia:morphowave_compact_md_firmware
- idemia:morphowave_compact_mdpi-m_firmware
- idemia:morphowave_compact_mdpi_firmware
- idemia:sigma_extreme_firmware
- idemia:sigma_lite\+_firmware
- idemia:sigma_lite_firmware
- idemia:sigma_wide_firmware
- idemia:visionpass_md_firmware
- idemia:visionpass_mdpi-m_firmware
- idemia:visionpass_mdpi_firmware
References
- https://biometricdevices.idemia.com/s/global-search/0696700000JJa0zAAD?sharing=true
- https://biometricdevices.idemia.com/s/global-search/0696700000JJa1nAAD?sharing=true
- https://www.idemia.com
- https://biometricdevices.idemia.com/s/global-search/0696700000JJa0zAAD?sharing=true
- https://biometricdevices.idemia.com/s/global-search/0696700000JJa1nAAD?sharing=true