Lucene search

[email protected]NVD:CVE-2021-35521

HistoryJul 22, 2021 - 12:15 p.m.

CVE-2021-35521

2021-07-2212:15:08

CWE-22

[email protected]

web.nvd.nist.gov

cve-2021-35521

path traversal

thrift command handlers

idemia morpho wave compact

visionpass devices

denial of services

information disclosure

tcp/ip packets

CVSS2

4.9

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N

EPSS

0.002

Percentile

57.8%

JSON

A path traversal in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows remote authenticated attackers to achieve denial of services and information disclosure via TCP/IP packets.

Affected configurations

Nvd

Node

idemiamorphowave_compact_mdpi_firmwareRange<2.6.2

AND

idemiamorphowave_compact_mdpiMatch-

Node

idemiamorphowave_compact_mdpi-m_firmwareRange<2.6.2

AND

idemiamorphowave_compact_mdpi-mMatch-

Node

idemiavisionpass_mdpi_firmwareRange<2.6.2

AND

idemiavisionpass_mdpiMatch-

Node

idemiavisionpass_mdpi-m_firmwareRange<2.6.2

AND

idemiavisionpass_mdpi-mMatch-

Node

idemiavisionpass_mdMatch2.6.2

AND

idemiavisionpass_md_firmwareMatch-

Node

idemiamorphowave_compact_mdMatch2.6.2

AND

idemiamorphowave_compact_md_firmwareMatch-

VendorProductVersionCPE
idemiamorphowave_compact_mdpi_firmware*cpe:2.3:o:idemia:morphowave_compact_mdpi_firmware:*:*:*:*:*:*:*:*
idemiamorphowave_compact_mdpi-cpe:2.3:h:idemia:morphowave_compact_mdpi:-:*:*:*:*:*:*:*
idemiamorphowave_compact_mdpi-m_firmware*cpe:2.3:o:idemia:morphowave_compact_mdpi-m_firmware:*:*:*:*:*:*:*:*
idemiamorphowave_compact_mdpi-m-cpe:2.3:h:idemia:morphowave_compact_mdpi-m:-:*:*:*:*:*:*:*
idemiavisionpass_mdpi_firmware*cpe:2.3:o:idemia:visionpass_mdpi_firmware:*:*:*:*:*:*:*:*
idemiavisionpass_mdpi-cpe:2.3:h:idemia:visionpass_mdpi:-:*:*:*:*:*:*:*
idemiavisionpass_mdpi-m_firmware*cpe:2.3:o:idemia:visionpass_mdpi-m_firmware:*:*:*:*:*:*:*:*
idemiavisionpass_mdpi-m-cpe:2.3:h:idemia:visionpass_mdpi-m:-:*:*:*:*:*:*:*
idemiavisionpass_md2.6.2cpe:2.3:h:idemia:visionpass_md:2.6.2:*:*:*:*:*:*:*
idemiavisionpass_md_firmware-cpe:2.3:o:idemia:visionpass_md_firmware:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
idemia	morphowave_compact_mdpi_firmware	*	cpe:2.3:o:idemia:morphowave_compact_mdpi_firmware::::::::
idemia	morphowave_compact_mdpi	-	cpe:2.3:h:idemia:morphowave_compact_mdpi:-:::::::*
idemia	morphowave_compact_mdpi-m_firmware	*	cpe:2.3:o:idemia:morphowave_compact_mdpi-m_firmware::::::::
idemia	morphowave_compact_mdpi-m	-	cpe:2.3:h:idemia:morphowave_compact_mdpi-m:-:::::::*
idemia	visionpass_mdpi_firmware	*	cpe:2.3:o:idemia:visionpass_mdpi_firmware::::::::
idemia	visionpass_mdpi	-	cpe:2.3:h:idemia:visionpass_mdpi:-:::::::*
idemia	visionpass_mdpi-m_firmware	*	cpe:2.3:o:idemia:visionpass_mdpi-m_firmware::::::::
idemia	visionpass_mdpi-m	-	cpe:2.3:h:idemia:visionpass_mdpi-m:-:::::::*
idemia	visionpass_md	2.6.2	cpe:2.3:h:idemia:visionpass_md:2.6.2:::::::*
idemia	visionpass_md_firmware	-	cpe:2.3:o:idemia:visionpass_md_firmware:-:::::::*

Rows per page:

1-10 of 121

References

biometricdevices.idemia.com/s/global-search/0696700000JJa0zAAD?sharing=true

biometricdevices.idemia.com/s/global-search/0696700000JJa1nAAD?sharing=true

www.idemia.com

CVSS2

4.9

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N

EPSS

0.002

Percentile

57.8%

JSON

Related for NVD:CVE-2021-35521

prion1 cve1 cvelist1