Sagem Compact Biometric Module Driver | Patched

Newer IDEMIA modules (post-2023, such as the VisionPass or the CBM-300 series with embedded TPM 2.0) use a completely redesigned driver architecture and are not vulnerable to these specific CVEs. However, backward compatibility modes may still pose risks if old driver versions are force-installed.

Run a network scan using IDEMIA’s MorphoManager tool (or an RMM script) to list all connected Sagem CBM devices and their current driver versions. sagem compact biometric module driver patched

If you are responsible for systems with Sagem Compact Biometric Modules, verify your driver version immediately: Newer IDEMIA modules (post-2023, such as the VisionPass

On Windows:

Alternatively, run PowerShell as Administrator: Run a network scan using IDEMIA’s MorphoManager tool

Get-WmiObject Win32_PnPSignedDriver | Where-Object $_.DeviceName -like "*Sagem*" | Select-Object DeviceName, DriverVersion

When security researchers and vendors declare that the Sagem compact biometric module driver patched, it implies that a new driver version (typically v2.5.3.x or higher, depending on your module series – e.g., CBM-L1, CBM-L2, or MA600) has been released to address the above flaws.

Following this patch, auditors from: