CVE-2021-35521: Improper Limitation of a Pathname to a Restricted Directory

A path traversal in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows remote authenticated attackers to achieve denial of services and information disclosure via TCP/IP packets...

CVE-2014-2363

Morpho Itemiser 3 8.17 has hardcoded administrative credentials, which makes it easier for remote attackers to obtain access via a login request...

CVE-2014-2363 Morpho Itemiser 3 Hard-Coded Credential

Morpho Itemiser 3 8.17 has hardcoded administrative credentials, which makes it easier for remote attackers to obtain access via a login request...

CVE-2014-2363

The CVE-2014-2363 entry affects Morpho Itemiser 3, specifically version 8.17, which has hardcoded administrative credentials in the device. The underlying issue enables remote authentication bypass, giving an attacker with network access the ability to log in as an administrator, read and write t...

CVE-2014-2363: Use of Hard-coded Password

Morpho Itemiser 3 8.17 has hardcoded administrative credentials, which makes it easier for remote attackers to obtain access via a login request...

Morpho Itemiser 3 Hard-Coded Credential

OVERVIEW Independent researchers Billy Rios and Terry McCorkle have identified hard-coded credentials in the Morpho Itemiser 3. Morpho has not produced a patch, update, or new version that mitigates this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS The followin...