PT-2021-6029
CVE-2021-35521
·
تاريخ النشر
2021-04-26
·
تاريخ التحديث
2021-08-06
الوصف من
CVSS 2.0
6.2
متوسطةالمقاييسAV:N/AC:H/Au:M/C:C/I:C/A:N
Name of the Vulnerable Software and Affected Versions
IDEMIA Morpho Wave Compact and VisionPass devices versions prior to 2.6.2
Description
The issue is related to a path traversal in Thrift command handlers, allowing remote authenticated attackers to achieve denial of services and information disclosure via TCP/IP packets. This can enable an attacker to read or write files on the device.
Recommendations
For versions prior to 2.6.2, update to version 2.6.2 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾