CVE:CVE-2021-35522
CNNVD:CNNVD-202107-1749
IDEMIA Morpho Wave Compact是idemia的一个工控设备。非接触式指纹扫描仪。
IDEMIA Morpho Wave Compact and VisionPass devices 2.6.2之前版本存在安全漏洞，该漏洞源于设备中的Thrift命令处理程序中的缓冲区溢出允许远程攻击者利用该漏洞通过TCP IP包实现代码执行、拒绝服务和信息泄露。
solution:Upgrade idemia morphowave_compact_mdpi_firmware to a higher version than 2.6.2,and avoid the version (,2.6.2); Upgrade idemia morphowave_compact_mdpi-m_firmware to a higher version than 2.6.2,and avoid the version (,2.6.2); Upgrade idemia visionpass_mdpi_firmware to a higher version than 2.6.2,and avoid the version (,2.6.2); Upgrade idemia visionpass_mdpi-m_firmware to a higher version than 2.6.2,and avoid the version (,2.6.2); Upgrade idemia visionpass_md_firmware to a higher version than -; Upgrade idemia morphowave_compact_md_firmware to a higher version than -; Upgrade idemia sigma_lite_firmware to a higher version than -; Upgrade idemia sigma_lite+_firmware to a higher version than -; Upgrade idemia sigma_wide_firmware to a higher version than -; Upgrade idemia sigma_extreme_firmware to a higher version than -; Upgrade idemia ma_vp_md_firmware to a higher version than -