26761 matches found
CVE-2023-26942
Weak encryption mechanisms in RFID Tags in Yale IA-210 Alarm v1.0 allows attackers to create a cloned tag via physical proximity to the original...
Design/Logic Flaw
Weak encryption mechanisms in RFID Tags in Yale IA-210 Alarm v1.0 allows attackers to create a cloned tag via physical proximity to the original...
Design/Logic Flaw
Weak encryption mechanisms in RFID Tags in Yale Keyless Lock v1.0 allows attackers to create a cloned tag via physical proximity to the original...
Design/Logic Flaw
Weak encryption mechanisms in RFID Tags in Yale Conexis L1 v1.1.0 allows attackers to create a cloned tag via physical proximity to the original...
PT-2023-20533
Name of the Vulnerable Software and Affected Versions pubnub versions prior to 7.4.0 com.pubnub:pubnub all versions github.com/pubnub/go all versions github.com/pubnub/go/v7 versions prior to 7.2.0 pubnub/pubnub versions prior to 6.1.0 pubnub/c-core versions prior to 4.5.0 com.pubnub:pubnub-kotli...
TETRA TA61 Security Vulnerability
TETRA TA61 is an identity encryption algorithm. A security vulnerability exists in TETRA TA61. An attacker exploiting this vulnerability could encrypt or decrypt arbitrary identities...
CVE-2023-49292
CVE-2023-49292 affects the Go library github.com/ecies/go (sec p256k1) prior to v2.0.8. A bug in ECDH/point validation allows an attacker to recover a private key interacted with by exploiting an invalid curve point, leading to private key exposure. The issue has been patched in v2.0.8. Affected ...
CVE-2023-49292
ecies is an Elliptic Curve Integrated Encryption Scheme for secp256k1 in Golang. If funcations Encapsulate, Decapsulate and ECDH could be called by an attacker, they could recover any private key that interacts with it. This vulnerability was patched in 2.0.8. Users are advised to upgrade...
CVE-2023-49292 Possible private key restoration in go package github.com/ecies/go
ecies is an Elliptic Curve Integrated Encryption Scheme for secp256k1 in Golang. If funcations Encapsulate, Decapsulate and ECDH could be called by an attacker, they could recover any private key that interacts with it. This vulnerability was patched in 2.0.8. Users are advised to upgrade...
CVE-2023-49292 Possible private key restoration in go package github.com/ecies/go
ecies is an Elliptic Curve Integrated Encryption Scheme for secp256k1 in Golang. If funcations Encapsulate, Decapsulate and ECDH could be called by an attacker, they could recover any private key that interacts with it. This vulnerability was patched in 2.0.8. Users are advised to upgrade...
CVE-2023-26942
The provided CVEs describe weak encryption in RFID tag implementations used by Yale hardware: CVE-2023-26942 affects Yale IA-210 Alarm v1.0, CVE-2023-26941 affects Yale Conexis L1 v1.1.0, and CVE-2023-26943 affects Yale Keyless Lock v1.0. In each case, attackers with physical proximity can clone ...
CVE-2023-26943
CVE-2023-26943 describes weak encryption in RFID tags across Yale Lock family products (Keyless Lock v1.0; Conexis L1 v1.1.0; IA-210 Alarm v1.0), enabling tag cloning with physical proximity. Root cause: weak encryption in RFID tags. Red Hat advisories corroborate the same CVE across the Yale dev...
Yale IA-210 Alarm Security Vulnerability
The Yale IA-210 Alarm is a residential alarm from Yale. The Yale IA-210 Alarm v1.0 version suffers from a security vulnerability that stems from a weak encryption mechanism in the RFID tag, which allows an attacker to create a cloned tag by physically approaching the original tag...
Yale Conexis L1 Security Vulnerability
The Yale Conexis L1 is a smart door lock from Yale. A security vulnerability exists in the Yale Conexis L1 v1.0.0, which stems from a weak encryption mechanism in the RFID tag that allows an attacker to create a clone of the original tag by physically approaching it...
CVE-2023-26941
CVE-2023-26941 involves weak encryption in RFID tags used by Yale Conexis L1 v1.1.0, enabling a cloned tag via close proximity to the original. Red Hat records corroborate the same description. No explicit exploit details or remediation are provided in the supplied documents.
Yale Keyless Lock Security Vulnerability
Yale Keyless Lock is a keyless connected smart lock from Yale. A security vulnerability exists in Yale Keyless Lock v1.0, which stems from a weak encryption mechanism in the RFID tags, leading to an attacker being able to create a clone of the original tag by getting physically close to it...
PT-2023-20863 · Yale · Yale Ia-210 Alarm
Name of the Vulnerable Software and Affected Versions: Yale IA-210 Alarm version 1.0 Description: The issue is related to weak encryption mechanisms in RFID Tags, allowing attackers to create a cloned tag via physical proximity to the original. Recommendations: For Yale IA-210 Alarm version 1.0,...
CVE-2023-26941
Weak encryption mechanisms in RFID Tags in Yale Conexis L1 v1.1.0 allows attackers to create a cloned tag via physical proximity to the original...