Lucene search
HistoryMar 30, 2006 - 11:02 a.m.
CVE-2006-1538
enova x-wall
asic
encryption
key storage
local access
hardware token
eeprom
security vulnerability
nvd
cve-2006-1538
4.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:C/I:N/A:N
6 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
40.9%
The Enova X-Wall ASIC encrypts with a key obtained via Microwire from a serial EEPROM that stores the key in cleartext, which allows local users with physical access to obtain the key by reading and duplicating an EEPROM that is located on a hardware token, or by sniffing the Microwire bus.
Affected configurations
Node
enovax-wall_asic
| CPE | Name | Operator | Version |
|---|---|---|---|
| enova:x-wall_asic | enova x-wall asic | eq | * |
Related
nvd
nvd
CVE-2006-1538
2006-03-30 11:02:00
prion
prion
Code injection
2006-03-30 11:02:00
cvelist
cvelist
CVE-2006-1538
2006-03-30 11:00:00
4.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:C/I:N/A:N
6 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
40.9%
Related for CVE-2006-1538