nCipher Advisory #9: Host-side attackers can access secret data

nCipher Security Advisory No. 9 Host-side attackers can access secret data ------------------------------------------ SUMMARY ======= On certain models and firmware combinations, an attacker who is able to issue commands to an HSM eg, by having use or control of the host to which it is connected...

CVE-2001-0081

swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the user, which could allow attackers to gain access to application keys...