CVE-2021-35521

Name of the Vulnerable Software and Affected Versions IDEMIA Morpho Wave Compact and VisionPass devices versions prior to 2.6.2

Description The issue is related to a path traversal in Thrift command handlers, allowing remote authenticated attackers to achieve denial of services and information disclosure via TCP/IP packets. This can enable an attacker to read or write files on the device.

Recommendations For versions prior to 2.6.2, update to version 2.6.2 or later to resolve the issue.