EUVD-2018-11474

Malware in sbrugna...

ChipsBank UMPTool Privilege Gain Vulnerability

ChipsBank UMPTool is a tool for batch modification of USB flash drive information. A security vulnerability exists in ChipsBank UMPTool that originates from the program's use of a simple alternative encryption algorithm to store passwords in NAND. An attacker in close physical proximity could...

CVE-2018-19795

ChipsBank UMPTool saves the password to the NAND with a simple substitution cipher, which allows attackers to get full access when having physical access to the device...

Default credentials

ChipsBank UMPTool saves the password to the NAND with a simple substitution cipher, which allows attackers to get full access when having physical access to the device...

CVE-2018-19795

ChipsBank UMPTool saves the password to the NAND with a simple substitution cipher, which allows attackers to get full access when having physical access to the device...

CVE-2018-19795

ChipsBank UMPTool stores passwords in NAND using a simple substitution cipher, enabling full device access if an attacker has physical access. The vulnerability arises from weak password handling (insecure storage of credentials) and grants high impact to confidentiality, integrity, and availabil...