3 matches found
Command injection
DISPUTED The certificate import component in IDEMIA formerly Morpho MorphoSmart 1300 Series aka MSO 1300 Series devices allows local users to obtain a command shell, and consequently gain privileges, via unspecified vectors. NOTE: the vendor disputes this because there is no command shell in the...
CVE-2017-15567
CVE-2017-15567 concerns IDEMIA/MorphoSmart 1300 Series devices where the certificate import component is alleged to allow a local attacker to obtain a command shell and escalate privileges via unspecified vectors. Multiple sources (CNVD-2017-35801, NVD entry) describe a local-privilege-escalation...
PT-2017-14099 · Idemia · Idemia Morphosmart 1300 Series
Name of the Vulnerable Software and Affected Versions: IDEMIA MorphoSmart 1300 Series devices affected versions not specified Description: The certificate import component in IDEMIA MorphoSmart 1300 Series devices allows local users to obtain a command shell and gain privileges via unspecified...