What’s Vulnerable › Vulnerabilities

CVE-2017-15567

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-10-23 · updated 2026-06-17

Description

The certificate import component in IDEMIA (formerly Morpho) MorphoSmart 1300 Series (aka MSO 1300 Series) devices allows local users to obtain a command shell, and consequently gain privileges, via unspecified vectors. NOTE: the vendor disputes this because there is no command shell in the product or in the associated SDK

Affected products

• IDEMIA Mso 1300 Firmware: all versions

References

• https://gist.github.com/shiham101/4c49ece8ecac7c3c02ecbc6942aeca80
• https://gist.github.com/shiham101/4c49ece8ecac7c3c02ecbc6942aeca80

Get alerted when CVE-2017-15567 or the next vulnerability affects your stack