Lucene search
HistoryApr 21, 2005 - 4:00 a.m.
CVE-2001-1436
dallas semiconductor
ibutton
ds1991
password security
dictionary attacks.
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
62.3%
Dallas Semiconductor iButton DS1991 returns predictable values when given an incorrect password, which makes it easier for users with physical access to conduct dictionary attacks against the device password.
Affected configurations
Node
dallas_semiconductoributtonMatchds1991
| CPE | Name | Operator | Version |
|---|---|---|---|
| dallas_semiconductor:ibutton | dallas semiconductor ibutton | eq | ds1991 |
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
62.3%
Related for CVE-2001-1436