Idemia
150 known vulnerabilities
Top Products
When handling contactless cards, usage of a specific function to get additional information from the card which
When reading DesFire keys, the function that reads the card isn't properly checking the boundaries when copying
During the retrofit validation process, the firmware doesn't properly check the boundaries while copying some att
The handler of the retrofit validation command doesn't properly check the boundaries when performing certain valida
The Parameter Zone Read and Parameter Zone Write command handlers allow performing a Stack buffer overflow. This cou
By abusing a design flaw in the firmware upgrade mechanism of the impacted terminal it's possible to cause a permanent
The web interface of the PAC Device allows the device administrator user profile to store malicious scripts in some fie
A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma de
A path traversal in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows rem
A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows ph
The certificate import component in IDEMIA (formerly Morpho) MorphoSmart 1300 Series (aka MSO 1300 Series) devices allow
Frequently Asked Questions
How many CVEs affect Idemia?
Idemia has 150 CVE records in our database, including 68 critical and 30 high severity vulnerabilities.
What are the most severe Idemia vulnerabilities?
Idemia has 68 critical severity (CVSS 9.0+) and 30 high severity (CVSS 7.0-8.9) vulnerabilities. Review the list above sorted by publication date to find the most recent high-severity issues.
How can I scan for Idemia vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Idemia products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Idemia Vulnerabilities
CyberStrike scans your infrastructure for Idemia vulnerabilities and provides real-time remediation guidance.
Get Started