IDEMIA records
11 published records for vendor idemia.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 4
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-121 Stack-based Buffer Overflow4
- CWE-787 Out-of-bounds Write2
- CWE-122 Heap-based Buffer Overflow1
- CWE-20 Improper Input Validation1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
11 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2021-35522No exploit | A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma devices before 4.9.4, idemia · morphowave compact mdpi firmware · CWE-787 | Critical9.8 | — | 3.6% | Jul 22, 2021 |
39Monitor | CVE-2023-33222No exploit | Stack buffer overflow when reading DESFire cardidemia · sigma lite firmware · CWE-121 | Critical9.8 | — | 1.2% | Dec 15, 2023 |
39Monitor | CVE-2023-33219No exploit | Stack Buffer Overflow when checking retrofit packageidemia · sigma lite firmware · CWE-121 | Critical9.8 | — | 1.1% | Dec 15, 2023 |
39Monitor | CVE-2023-33220No exploit | Stack Buffer Overflow when checking some attributes during retrofitidemia · sigma lite firmware · CWE-121 | Critical9.8 | — | 1.1% | Dec 15, 2023 |
39Monitor | CVE-2023-33218No exploit | Stack Buffer Overflow in a binary run at upgrade startupidemia · sigma lite firmware · CWE-121 | Critical9.8 | — | 1.1% | Dec 15, 2023 |
39Monitor | CVE-2023-33221No exploit | Heap Buffer Overflow when reading DESFire cardidemia · sigma lite firmware · CWE-122 | Critical9.8 | — | 1.0% | Dec 15, 2023 |
31Monitor | CVE-2017-15567No exploit | The certificate import component in IDEMIA (formerly Morpho) MorphoSmart 1300 Series (aka MSO 1300 Series) devices allows local users to obtidemia · mso 1300 firmware | High7.8 | — | 0.2% | Oct 23, 2017 |
30Monitor | CVE-2023-33217No exploit | Missing integrity check on upgrade packageidemia · sigma lite firmware · CWE-20 | High7.5 | — | 0.6% | Dec 15, 2023 |
24Monitor | CVE-2021-35520No exploit | A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows physically proximate aidemia · morphowave compact mdpi firmware · CWE-787 | Medium6.2 | — | 0.3% | Jul 22, 2021 |
23Monitor | CVE-2021-35521No exploit | A path traversal in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows remote authenticated atidemia · morphowave compact mdpi firmware · CWE-22 | Medium5.9 | — | 1.3% | Jul 22, 2021 |
19Monitor | CVE-2023-4667No exploit | Stored Cross Site Scripting in webserver administrationidemia · sgima lite \& lite\+ firmware · CWE-79 | Medium4.8 | — | 0.4% | Nov 28, 2023 |
- CVE-2021-3552240Plan
A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma devices before 4.9.4,
CriticalCVSS 9.8No exploitEPSS 3%idemia · morphowave compact mdpi firmwareJul 22, 2021
- CVE-2023-3322239Monitor
Stack buffer overflow when reading DESFire card
CriticalCVSS 9.8No exploitEPSS 1%idemia · sigma lite firmwareDec 15, 2023
- CVE-2023-3321939Monitor
Stack Buffer Overflow when checking retrofit package
CriticalCVSS 9.8No exploitEPSS 1%idemia · sigma lite firmwareDec 15, 2023
- CVE-2023-3322039Monitor
Stack Buffer Overflow when checking some attributes during retrofit
CriticalCVSS 9.8No exploitEPSS 1%idemia · sigma lite firmwareDec 15, 2023
- CVE-2023-3321839Monitor
Stack Buffer Overflow in a binary run at upgrade startup
CriticalCVSS 9.8No exploitEPSS 1%idemia · sigma lite firmwareDec 15, 2023
- CVE-2023-3322139Monitor
Heap Buffer Overflow when reading DESFire card
CriticalCVSS 9.8No exploitEPSS 1%idemia · sigma lite firmwareDec 15, 2023
- CVE-2017-1556731Monitor
The certificate import component in IDEMIA (formerly Morpho) MorphoSmart 1300 Series (aka MSO 1300 Series) devices allows local users to obt
HighCVSS 7.8No exploitEPSS 0%idemia · mso 1300 firmwareOct 23, 2017
- CVE-2023-3321730Monitor
Missing integrity check on upgrade package
HighCVSS 7.5No exploitEPSS 0%idemia · sigma lite firmwareDec 15, 2023
- CVE-2021-3552024Monitor
A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows physically proximate a
MediumCVSS 6.2No exploitEPSS 0%idemia · morphowave compact mdpi firmwareJul 22, 2021
- CVE-2021-3552123Monitor
A path traversal in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows remote authenticated at
MediumCVSS 5.9No exploitEPSS 1%idemia · morphowave compact mdpi firmwareJul 22, 2021
- CVE-2023-466719Monitor
Stored Cross Site Scripting in webserver administration
MediumCVSS 4.8No exploitEPSS 0%idemia · sgima lite \& lite\+ firmwareNov 28, 2023