Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-4535

An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the computer and a specially crafted USB device or smart card. This flaw allows the attacker to manipulate APDU responses and potentially gain unauthorized access to sensitive data, compromising the system's security.

Published

2023-11-06T17:15:12.083

Last Modified

2024-11-21T08:35:21.943

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.5 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-125
  • Type: Primary
    CWE-125
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application opensc_project opensc 0.23.0 Yes
Application opensc_project opensc 0.23.0 Yes
Application opensc_project opensc 0.23.0 Yes
Operating System fedoraproject fedora 38 Yes
Operating System fedoraproject fedora 39 Yes
Operating System redhat enterprise_linux 9.0 Yes
References