CVE-2025-25201 Improper Validation of Admin Key in PIV Smartcard

Nitrokey 3 Firmware is the the firmware of Nitrokey 3 USB keys. For release 1.8.0, and test releases with PIV enabled prior to 1.8.0, the PIV application could accept invalid keys for authentication of the admin key. This could lead to compromise of the integrity of the data stored in the...

Nitrokey 3 Firmware 授权问题漏洞

Nitrokey 3 Firmware is a Nitrokey 3 firmware from Nitrokey Open Source. Nitrokey 3 Firmware suffers from an authorization issue vulnerability that stems from the fact that a PIV application can accept an invalid key to validate an administrative key. This could result in the integrity of data...