CVE-2025-11998

The following HP Card Readers B Models X3D03B & Y7C05B are potentially vulnerable to information disclosure, allowing prior user identity to be inherited under certain conditions —e.g., when an NFC device such as a smartphone/smartwatches is in proximity during a card swipe event...

CVE-2025-11998

The following HP Card Readers B Models X3D03B & Y7C05B are potentially vulnerable to information disclosure, allowing prior user identity to be inherited under certain conditions —e.g., when an NFC device such as a smartphone/smartwatches is in proximity during a card swipe event...

CVE-2025-11998 HP Card Readers (B Models) – Potential Information Disclosure

The following HP Card Readers B Models X3D03B & Y7C05B are potentially vulnerable to information disclosure, allowing prior user identity to be inherited under certain conditions —e.g., when an NFC device such as a smartphone/smartwatches is in proximity during a card swipe event...

CVE-2025-11998 HP Card Readers (B Models) – Potential Information Disclosure

The following HP Card Readers B Models X3D03B & Y7C05B are potentially vulnerable to information disclosure, allowing prior user identity to be inherited under certain conditions —e.g., when an NFC device such as a smartphone/smartwatches is in proximity during a card swipe event...

CVE-2025-11998

The CVE-2025-11998 entry concerns HP Card Readers B Models X3D03B and Y7C05B, with potential information disclosure where a prior user identity could be inherited when an NFC device (e.g., smartphone or smartwatch) is in proximity during a card swipe. Connected documents (Red Hat, NVD, CVE lists,...

PT-2025-44422

Name of the Vulnerable Software and Affected Versions HP Card Readers B Models X3D03B & Y7C05B Description HP Card Readers B Models X3D03B and Y7C05B may disclose information, potentially allowing a prior user’s identity to be inherited. This can occur when a Near Field Communication NFC device,...

HP Card Readers B Model 安全漏洞

HP Card Readers B Model is a card reader device from Hewlett-Packard HP. A security vulnerability exists in the HP Card Readers B Model that originates from the possibility of inheriting a previous user's identity under certain conditions, which could lead to information disclosure...

HP Card Readers (B Models) – Potential Information Disclosure

The following HP Card Readers B Models X3D03B & Y7C05B are potentially vulnerable to information disclosure, allowing prior user identity to be inherited under certain conditions —e.g., when an NFC device such as a smartphone/smartwatches is in proximity during a card swipe event. HP has determin...

The vulnerability of the RtsPer.sys driver in Realtek’s SD card readers relates to writing beyond the buffer boundaries in memory. This allows an attacker to write data into the kernel memory beyond the boundaries of the system buffer.

The vulnerability of the RtsPer.sys driver in Realtek’s SD card readers is related to writing data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to write data into the kernel memory beyond the system buffer limits...

The vulnerability of the RtsPer.sys driver in the Realtek SD card reader software allows a hacker to gain unauthorized access to the DMA controller.

The vulnerability of the RtsPer.sys driver in Realtek’s SD card readers is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the DMA controller...

The vulnerability of the RtsPer.sys and RtsUer.sys drivers of Realtek SD card readers, related to memory release errors, allows an attacker to gain access to the kernel’s stack memory and dynamic memory.

The vulnerability of the RtsPer.sys and RtsUer.sys drivers of Realtek SD card readers is related to memory release errors. Exploiting this vulnerability can allow an attacker to gain access to kernel memory from the stack and dynamic memory...

CVE-2022-25477

Vulnerability in Realtek RtsPer driver for PCIe Card Reader RtsPer.sys before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader RtsUer.sys before 10.0.22000.31274 leaks driver logs that contain addresses of kernel mode objects, weakening KASLR...

CVE-2022-25480

CVE-2022-25480 affects Realtek Realtek RtsPer.sys (PCIe Card Reader) and RtsUer.sys (USB Card Reader). The issue is a memory/write vulnerability that allows writing to kernel memory beyond the SystemBuffer of the IRP due to a buffer overflow in these drivers. Affected versions are RtsPer.sys prio...

After Updating to Citrix Workspace App for Windows 1912 CU4 USB Card Readers No Longer Work in Epic

Redirecting Ingenico credit card readers does not work as expected in Epic applications after upgrading to Citrix Workspace App for Windows 1912 CU4...

Combatting Insider Threats with Keyboard Security

As cyberattacks snowball and insider threats become an ever-larger part of the problem, it may be time to move beyond purely software-based cyber-defenses. Implementing hardware-based security, like secure keyboards, can be an important part of the mix. Those in IT-leadership roles are well aware...

Buffer Overflows

PC/SC Lite is vulnerable to buffer overflow in the way the pcscd daemon. It is due to a resource manager that coordinates communications with smart card readers and smart cards connected to the system, handled client requests. A local user could create a specially-crafted request that would cause...

Denial Of Service (DoS)

PC/SC Lite is vulnerable to Denial Of Service DoS.It is possible due to the way the pcscd daemon coordinates communications with smart card readers and smart cards connected to the system, handled client requests. A local user could create a specially-crafted request that would cause the pcscd...

Square, PayPal POS Hardware Open to Multiple Attack Vectors

Mobile point-of-sale POS terminals have revolutionized the retail space in many ways, with devices such as Square offering locations like mall kiosks, small coffee shops and roadside stands a handy and cost-effective way to accept credit cards. Unfortunately, more than half of leading mobile POS...

Sharp RW-4040 driver installer for Windows untrusted search path vulnerability

Sharp RW-4040 driver installer for Windows is a Windows-based driver installer for IC card readers from Sharp Japan. An untrusted search path vulnerability exists in Sharp RW-4040 driver installer for Windows 7 version 2.27. An attacker can exploit this vulnerability to gain privileges with a...

RHEL 6 : ccid (RHSA-2013:0523)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2013:0523 advisory. Chip/Smart Card Interface Devices CCID is a USB smart card reader standard followed by most modern smart card readers. The ccid package provides a...