CVE-2017-15361

The CVE-2017-15361 ROCA issue stems from Infineon RSA Library 1.02.013 used in TPM firmware, where RSA key generation can be mishandled. Affected firmware ranges include versions prior to 0000000000000422–4.34, prior to 000000000000062b–6.43, and prior to 0000000000008521–133.33. This enables att...

Infineon RSA library does not properly generate RSA key pairs

Overview The Infineon RSA library version 1.02.013 does not properly generate RSA key pairs, which may allow an attacker to recover the RSA private key corresponding to an RSA public key generated by this library. This vulnerability is often cited as "ROCA" in the media. Description...

roca.com XSS vulnerability

Vulnerable URL: http://www.roca.com/catalogue/search/text-search/%22%3E%3Cimg%20src=x%20onerror=prompt'OPENBUGBOUNTY'%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 178369 VIP...