Description
The certificate import component in IDEMIA (formerly Morpho) MorphoSmart 1300 Series (aka MSO 1300 Series) devices allows local users to obtain a command shell, and consequently gain privileges, via unspecified vectors. NOTE: the vendor disputes this because there is no command shell in the product or in the associated SDK
References (1)
Core 1
Core References
Third Party Advisory x_refsource_misc
https://gist.github.com/shiham101/4c49ece8ecac7c3c02ecbc6942aeca80
Scores
CVSS v3
7.8
EPSS
0.0025
EPSS Percentile
16.7%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
Status
published
Products (1)
idemia/mso_1300_firmware
Published
Oct 23, 2017
Tracked Since
Feb 18, 2026