CVE-2017-15567

The certificate import component in IDEMIA (formerly Morpho) MorphoSmart 1300 Series (aka MSO 1300 Series) devices allows local users to obtain a command shell, and consequently gain privileges, via unspecified vectors. NOTE: the vendor disputes this because there is no command shell in the product or in the associated SDK

Score

CVSS 3.0 7.8 High

Status

Modified - cve@mitre.org

Published

2017-10-23

Last modified

2024-08-05

Affected products

• Mso 1300 Firmware (Idemia)

References

• https://gist.github.com/shiham101/4c49ece8ecac7c3c02ecbc6942aeca80