PT-2017-14099 · Idemia · Idemia Morphosmart 1300 Series

CVE-2017-15567 · Publicado 2017-10-23 · Atualizado 2024-08-05

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IDEMIA MorphoSmart 1300 Series devices (affected versions not specified)

Description The certificate import component in IDEMIA MorphoSmart 1300 Series devices allows local users to obtain a command shell and gain privileges via unspecified vectors. It is noted that the vendor disputes this issue because there is no command shell in the product or in the associated SDK.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2017-15567

Produtos afetados

Idemia Morphosmart 1300 Series

Referências · 3

• https://gist.github.com/shiham101/4c49ece8ecac7c3c02ecbc6942aeca80 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-15567 · Nota de Segurança
• https://t.me/cvenotify/89268 · Publicação no Telegram