CVE-2020-6861

Ledger Monero app (before version 1.5.1) on Ledger Nano/S is affected by a flaw in the protocol design that lets a local attacker obtain the master spending key by sending specially crafted messages to the app on a PIN-entered Ledger connected to a host PC. Affected component: Ledger Monero app; ...