The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
OpenSC before 0.11.5 uses weak permissions (ADMIN file control information of 00) for the 5015 directory on smart cards and USB crypto tokens running Siemens CardOS M4, which allows physically proximate attackers to change the PIN.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade opensc | Jul 30, 2024 | Aug 1, 2008 |
| Gentoo Linux | — | Upgrade dev-libs/opensc. | Oct 30, 2017 | Aug 1, 2008 |
| Suse | — | Upgrade libopensc2Upgrade opensc-develUpgrade openscUpgrade libopensc2-32bitUpgrade opensc-x86Upgrade libopensc2-x86Upgrade opensc-bash-completionUpgrade opensc-32bit | Feb 17, 2015 | Jul 9, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub