VULNERABILITY INTELLIGENCE
CVE-2021-35520
CVSS score6.2 MEDIUM
EPSS probability0.34%
CISA KEVNot currently listed
Published2021-07-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows physically proximate authenticated attackers to achieve code execution, denial of services, and information disclosure via serial ports.
Weakness classification
- nvd@nist.gov: CWE-787
Primary references
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org — Product
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Product