PT-2018-17796 · Keepkey · Keepkey

Published 2018-03-14 · Updated 2020-01-07 · CVE-2018-6875

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions KeepKey version 4.0.0

Description The issue allows attackers to trigger the display of information that should not be accessible. This is related to text containing characters that the device's font lacks, which can be exploited to reveal sensitive information.

Recommendations For KeepKey version 4.0.0, update to a newer version that contains a fix for this issue to prevent unauthorized information display.

Fix

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

CVE-2018-6875

Affected Products

Keepkey

References · 3

• https://osv.dev/vulnerability/CVE-2018-6875 · Vendor Advisory
• https://keepkey.com/2018/03/09/security-updates-responsible-disclosure · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-6875 · Security Note