Buffer Overflow Vulnerability in IDEMIA Morpho Wave Compact, VisionPass, Sigma, and MA VP MD Devices

Buffer Overflow Vulnerability in IDEMIA Morpho Wave Compact, VisionPass, Sigma, and MA VP MD Devices

CVE-2021-35522 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma devices before 4.9.4, and MA VP MD devices before 4.9.7 allows remote attackers to achieve code execution, denial of services, and information disclosure via TCP/IP packets.

Learn more about our Web Application Penetration Testing UK.