Cogent Cis-202 Iris Scanner Driver Windows 7 32 Bit ✦ Confirmed

| CVE | Issue | Impact | |-----|-------|--------| | CVE-2019-1189 | Improper input validation in IOCTL 0x222000 | Local privilege escalation via buffer overflow in kernel pool | | CVE-2018-8213 | Driver allows arbitrary user-mode read of iris buffer | Information disclosure (iris template theft) | | No CVE (unpatched) | No IOMMU protection – DMA attacks possible if USB port accessible | Physical memory read/write |

[Manufacturer] %MfgName%=Cogent, NTx86 [Cogent.NTx86] %CIS202_DeviceDesc%=CIS202_DDI, USB\VID_1D3C&PID_0202 cogent cis-202 iris scanner driver windows 7 32 bit

[CIS202_DDI.NTx86] CopyFiles = CIS202_CopyFiles AddReg = CIS202_AddReg | CVE | Issue | Impact | |-----|-------|--------|

| Field | Value | |-------|-------| | Vendor ID | 0x1D3C (Cogent Systems) | | Product ID | 0x0202 (CIS-202) | | Interface Class | 0xFF (Vendor-specific) | | Endpoints | Bulk OUT (0x02), Bulk IN (0x81) | | Max Packet Size | 512 bytes (high-speed) | | Iris resolution | 640x480, 8-bit grayscale | NTx86 [Cogent.NTx86] %CIS202_DeviceDesc%=CIS202_DDI

qemu-system-x86_32 -usb -device usb-host,vendorid=0x1d3c,productid=0x0202 \ -drive file=win7_x86.qcow2 -m 2048 Or use a via libusb and a custom userspace driver that responds to the IOCTLs with pre-captured iris images. 8. Modern Alternatives & Migration Path Given the obsolescence, a deep paper should conclude with pragmatic advice: