CVE:CVE-2021-35521
CNNVD:CNNVD-202107-1750
IDEMIA Morpho Wave Compact是idemia的一个工控设备。非接触式指纹扫描仪。
IDEMIA Morpho Wave Compact and VisionPass devices 2.6.2之前版本存在安全漏洞，该漏洞源于设备中的Thrift命令处理程序中的路径遍行允许远程身份验证的攻击者利用该漏洞通过TCP IP包实现拒绝服务和信息泄露。
solution:Upgrade idemia morphowave_compact_mdpi_firmware to a higher version than 2.6.2,and avoid the version (,2.6.2); Upgrade idemia morphowave_compact_mdpi-m_firmware to a higher version than 2.6.2,and avoid the version (,2.6.2); Upgrade idemia visionpass_mdpi_firmware to a higher version than 2.6.2,and avoid the version (,2.6.2); Upgrade idemia visionpass_mdpi-m_firmware to a higher version than 2.6.2,and avoid the version (,2.6.2); Upgrade idemia visionpass_md_firmware to a higher version than -; Upgrade idemia morphowave_compact_md_firmware to a higher version than -