Lucene search
+L

186 matches found

OSV
OSV
added 2022/06/20 8:24 p.m.9 views

MAL-2022-2257 Malicious code in cryptolib-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aadad8a99682bbe6501c9891001de7c4e5c6a2519150152340dbc3c4b2c8f53c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
NVD
NVD
added 2021/01/07 4:15 p.m.42 views

CVE-2021-3011

An electromagnetic-wave side-channel issue was discovered on NXP SmartMX / P5x security microcontrollers and A7x secure authentication microcontrollers, with CryptoLib through v2.9. It allows attackers to extract the ECDSA private key after extensive physical access and consequently produce a...

4.2CVSS4.5AI score0.00197EPSS
SaveExploits1References2
Prion
Prion
added 2021/01/07 4:15 p.m.44 views

Design/Logic Flaw

An electromagnetic-wave side-channel issue was discovered on NXP SmartMX / P5x security microcontrollers and A7x secure authentication microcontrollers, with CryptoLib through v2.9. It allows attackers to extract the ECDSA private key after extensive physical access and consequently produce a...

1.9CVSS4.6AI score0.00197EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/01/07 4:15 p.m.6 views

CVE-2021-3011

An electromagnetic-wave side-channel issue was discovered on NXP SmartMX / P5x security microcontrollers and A7x secure authentication microcontrollers, with CryptoLib through v2.9. It allows attackers to extract the ECDSA private key after extensive physical access and consequently produce a...

4.2CVSS6.2AI score0.00197EPSS
SaveExploits1References3
CVE
CVE
added 2021/01/07 3:07 p.m.165 views

CVE-2021-3011

The CVE-2021-3011 family describes an electromagnetic-wave side-channel vulnerability in NXP SmartMX/P5x security microcontrollers and A7x secure authentication microcontrollers, affecting CryptoLib up to v2.9. The issue enables extraction of the ECDSA private key with extensive physical access, ...

4.2CVSS4.5AI score0.00197EPSS
SaveExploits1References2Affected Software45
Positive Technologies
Positive Technologies
added 2018/06/15 12:00 a.m.9 views

PT-2018-11169 · Cryptolib · Cryptolib

Name of the Vulnerable Software and Affected Versions: cryptlib versions 3.4.4 and earlier Description: The issue allows a memory-cache side-channel attack on DSA and ECDSA signatures, also known as the Return Of the Hidden Number Problem or ROHNP. To discover a key, the attacker needs access to...

4.9CVSS6.5AI score0.00346EPSS
SaveExploits1References3
Rows per page
Query Builder