VULNERABILITY INTELLIGENCE

CVE-2021-35521

CVSS score5.9 MEDIUM

EPSS probability1.37%

CISA KEVNot currently listed

Published2021-07-22

Last modified2026-06-17

Description

A path traversal in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows remote authenticated attackers to achieve denial of services and information disclosure via TCP/IP packets.