IDEMIA fixes vulnerability that can allow threat actors to open doors remotely

guest · Jul 26, 2021

IDEMIA fixes vulnerability that can allow threat actors to open doors remotely
July 26, 2021
https://therecord.media/idemia-fixe...n-allow-threat-actors-to-open-doors-remotely/

IDEMIA, one of the largest vendors of biometrics authentication solutions, has fixed last week a series of security flaws, including a major vulnerability that would have allowed threat actors to hijack devices and open doors remotely.

Tracked as CVE-2021-35522, the vulnerability impacted IDEMIA devices like VisionPass facial recognition devices, SIGMA fingerprint terminals, and MorphoWave and MorphoAccess vein and fingerprint authentication solutions.
The bug, found by Russian security firm Positive Technologies, was considered incredibly dangerous and received a “critical” rating and a severity score of 9.8/10 on the CVSSv3 scale.
Click to expand...

Described as a buffer overflow in the Thrift protocol network packet design, the bug can allow threat actors with LAN or WAN access to an unpatched device to take over its firmware and control its features.

“Exploitation of this vulnerability allows attackers to bypass the biometric identification provided by the IDEMIA devices listed above,” said Vladimir Nazarov, Head of ICS Security, Positive Technologies. “As a result, criminals can, for example, remotely open doors controlled by the device and enter secured areas.”
Click to expand...

Positive Technologies: IDEMIA fixed biometric identification devices vulnerabilities discovered by Positive Technologies

IIDEMIA, global leader in Augmented Identity, has fixed three vulnerabilities discovered by Positive Technologies experts Natalia Tlyapova, Sergey Fedonin, Vladimir Kononovich, and Vyacheslav Moskvin. One of the detected vulnerabilities was critical. The flaws were detected in the firmware of IDEMIA MoprhoWave, VisionPass, SIGMA, and MorphoAccess devices, which are designed to organize access control with the help of biometric identification.
Click to expand...

The first vulnerability (CVE-2021-35522), which has a CVSS v3 score of 9.8, signifying critical severity, would allow attackers to remotely execute arbitrary code. It is a Buffer Overflow vulnerability, which occurs through the lack of a length check in the input received from the Thrift protocol network packet.

The second flaw (CVE-2021-35520, score 6.2) is a Heap Overflow vulnerability in the serial port handler. If attackers have physical access to the serial port, they can cause a denial of service.

The third issue (CVE-2021-35521, score 5.9) is a Path Traversal vulnerability. When this is exploited, it allows the reading and writing of arbitrary files, which may in turn lead to unauthorized execution of privileged commands on the device.
Click to expand...

Log in or Sign up

IDEMIA fixes vulnerability that can allow threat actors to open doors remotely

guest Guest

Log in or Sign up

IDEMIA fixes vulnerability that can allow threat actors to open doors remotely

guest Guest

Useful Searches