CVE-2019-15809

🗓️ 03 Oct 2019 14:15:11Reported by [email protected]Type

Smart cards with Atmel Toolbox 00.03.11.05 and AT90SC chip have a timing side channel in ECDSA signature generation, allowing a local attacker to compute the private key

Reporter	Title	Published	Views	Family All 6
Circl	CVE-2019-15809	14 Jan 202600:46	–	circl
CVE	CVE-2019-15809	3 Oct 201913:17	–	cve
Cvelist	CVE-2019-15809	3 Oct 201913:17	–	cvelist
EUVD	EUVD-2019-6727	7 Oct 202500:30	–	euvd
Prion	Design/Logic Flaw	3 Oct 201914:15	–	prion
RedhatCVE	CVE-2019-15809	22 May 202510:21	–	redhatcve

NVD

Node

microchip atmel_toolboxMatch00.03.11.05

Node

athena-scs idprotectMatch010b.0352.0005

athena-scs idprotectMatch010e.1245.0002

athena-scs idprotectMatch0106.0130.0401

cryptsoft s/a_idflex_vMatch010b.0352.0005

tecsec armored_cardMatch010e.0264.0001

tecsec armored_cardMatch108.0264.0001

thalesgroup etoken_4300Match010e.1245.0002

Source	Link
eprint	www.eprint.iacr.org/2011/232.pdf
csrc	www.csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/details
openwall	www.openwall.com/lists/oss-security/2019/10/02/2
minerva	www.minerva.crocs.fi.muni.cz/
ssi	www.ssi.gouv.fr/certification_cc/bibliotheque-cryptographique-atmel-toolbox-00-03-11-05/
tches	www.tches.iacr.org/index.php/TCHES/article/view/7337

21 Nov 2024 04:29Current

4.7Medium risk

Vulners AI Score4.7

CVSS 21.2

CVSS 3.14.7

EPSS0.00105

CWE-203