Command injection

DISPUTED The certificate import component in IDEMIA formerly Morpho MorphoSmart 1300 Series aka MSO 1300 Series devices allows local users to obtain a command shell, and consequently gain privileges, via unspecified vectors. NOTE: the vendor disputes this because there is no command shell in the...

CVE-2017-15567

CVE-2017-15567 concerns IDEMIA/MorphoSmart 1300 Series devices where the certificate import component is alleged to allow a local attacker to obtain a command shell and escalate privileges via unspecified vectors. Multiple sources (CNVD-2017-35801, NVD entry) describe a local-privilege-escalation...

CVE-2017-15567: Undefined Security Weakness

The certificate import component in IDEMIA formerly Morpho MorphoSmart 1300 Series aka MSO 1300 Series devices allows local users to obtain a command shell, and consequently gain privileges, via unspecified vectors. NOTE: the vendor disputes this because there is no command shell in the product o...

PT-2017-14099 · Idemia · Idemia Morphosmart 1300 Series

Name of the Vulnerable Software and Affected Versions: IDEMIA MorphoSmart 1300 Series devices affected versions not specified Description: The certificate import component in IDEMIA MorphoSmart 1300 Series devices allows local users to obtain a command shell and gain privileges via unspecified...