CVE-2019-18671
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.3%
Insufficient checks in the USB packet handling of the ShapeShift KeepKey hardware wallet before firmware 6.2.2 allow out-of-bounds writes in the .bss segment via crafted messages. The vulnerability could allow code execution or other forms of impact. It can be triggered by unauthenticated attackers and the interface is reachable via WebUSB.
Produtos afetados
n/a · n/aReferências
https://blog.inhq.net/posts/keepkey-CVE-2019-18671/https://github.com/keepkey/keepkey-firmware/commit/b222c66cdd7c3203d917c80ba615082d309d80c3https://medium.com/shapeshift-stories/keepkey-release-notes-v-6f7d2ec78065https://medium.com/shapeshift-stories/shapeshift-security-update-8ec89bb1b4e3