PT-2018-17796

CVE-2018-6875

·

Published

2018-03-14

·

Updated

2020-01-07

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions KeepKey version 4.0.0
Description The issue allows attackers to trigger the display of information that should not be accessible. This is related to text containing characters that the device's font lacks, which can be exploited to reveal sensitive information.
Recommendations For KeepKey version 4.0.0, update to a newer version that contains a fix for this issue to prevent unauthorized information display.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-134: Use of Externally-Controlled Format String
Related identifiers
CVE-2018-6875
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com