CVE-2021-35522

CVE-2021-35522 affects IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma devices before 4.9.4, and MA VP MD devices before 4.9.7. A buffer overflow in the Thrift command handlers allows remote attackers to cause code execution, denial of service, and information disclosure via...

CVE-2021-35521

CVE-2021-35521 affects IDEMIA Morpho Wave Compact and VisionPass devices prior to version 2.6.2. A path traversal in the Thrift command handlers allows remote authenticated attackers to cause denial of service and information disclosure over TCP/IP packets. The vulnerability is exploitable by aut...