CVE-2021-35521

🗓️ 22 Jul 2021 11:32:42Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 53 Views

Path traversal in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 leads to denial of service and information disclosure

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2021-35521	22 Jul 202112:15	–	attackerkb
BDU FSTEC	The vulnerability of IDEMIA’s biometric identification systems’ microprogramming software relates to the possibility of it escaping the directory structure. This allows attackers to read/write device files.	4 Feb 202200:00	–	bdu_fstec
Circl	CVE-2021-35521	22 Jul 202116:36	–	circl
CNNVD	IDEMIA Morpho Wave Compact 路径遍历漏洞	22 Jul 202100:00	–	cnnvd
Cvelist	CVE-2021-35521	22 Jul 202111:32	–	cvelist
EUVD	EUVD-2021-22157	7 Oct 202500:30	–	euvd
NVD	CVE-2021-35521	22 Jul 202112:15	–	nvd
OSV	CVE-2021-35521	22 Jul 202112:15	–	osv
Prion	Path traversal	22 Jul 202112:15	–	prion
RedhatCVE	CVE-2021-35521	22 May 202519:54	–	redhatcve

NVD

Node

AND

idemia morphowave_compact_mdpi_firmwareRange<2.6.2

idemia morphowave_compact_mdpiMatch-

Node

AND

idemia morphowave_compact_mdpi-m_firmwareRange<2.6.2

idemia morphowave_compact_mdpi-mMatch-

Node

AND

idemia visionpass_mdpi_firmwareRange<2.6.2

idemia visionpass_mdpiMatch-

Node

AND

idemia visionpass_mdpi-m_firmwareRange<2.6.2

idemia visionpass_mdpi-mMatch-

Node

AND

idemia visionpass_md_firmwareMatch-

idemia visionpass_mdMatch2.6.2

Node

AND

idemia morphowave_compact_md_firmwareMatch-

idemia morphowave_compact_mdMatch2.6.2

Source	Link
biometricdevices	www.biometricdevices.idemia.com/s/global-search/0696700000JJa1nAAD
idemia	www.idemia.com/
biometricdevices	www.biometricdevices.idemia.com/s/global-search/0696700000JJa0zAAD

17 Jun 2026 03:57Current

5.6Medium risk

Vulners AI Score5.6

CVSS 24.9

CVSS 3.15.9

EPSS0.01372

CWE-22