Idemia Morphowave Compact Md Firmware vulnerabilities

2 CVEs affecting Idemia Morphowave Compact Md Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-35522, published 2021-07-22.

More from Idemia.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-35522, published 2021-07-22. Critical severity, CVSS 9.8. EPSS: 3.7% chance of exploitation in the next 30 days. A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma devices before 4.9.4, and MA VP MD devices before 4.9.7 allows remote attackers…
• CVE-2021-35521, published 2021-07-22. Medium severity, CVSS 5.9. EPSS: 1.4% chance of exploitation in the next 30 days. A path traversal in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows remote authenticated attackers to achieve denial of services and information…