Lucene search

K
redosRedosROS-20240422-01
HistoryApr 22, 2024 - 12:00 a.m.

ROS-20240422-01

2024-04-2200:00:00
redos.red-soft.ru
2
vulnerability
opensc
smart card
authentic driver
card registration
pkcs15-init
compromise
unix

3.4 Low

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%

Vulnerability in the OpenSC smart card software toolkit and libraries is related to a bug in the AuthentIC driver and occurs during card registration using pkcs15-init.
a bug in the AuthentIC driver and occurs during the card registration process using pkcs15-init,
when a user or administrator registers or modifies cards. Exploitation of the vulnerability could
allow an attacker to compromise card management operations.

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64opensc<= 0.24.0-2UNKNOWN

3.4 Low

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%