Lucene search
HistoryApr 21, 2005 - 4:00 a.m.
CVE-2001-1436
dallas semiconductor
ibutton
ds1991
password security
dictionary attacks.
6.6 Medium
AI Score
Confidence
Low
4.6 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
62.2%
Dallas Semiconductor iButton DS1991 returns predictable values when given an incorrect password, which makes it easier for users with physical access to conduct dictionary attacks against the device password.
Affected configurations
Node
dallas_semiconductoributtonMatchds1991
| CPE | Name | Operator | Version |
|---|---|---|---|
| dallas_semiconductor:ibutton | dallas semiconductor ibutton | eq | ds1991 |
6.6 Medium
AI Score
Confidence
Low
4.6 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
62.2%
Related for CVE-2001-1436