PT-2020-14749 · Unknown · T Series Readers

Matthew Daley · Published 2020-09-15 · Updated 2020-09-22 · CVE-2020-16097

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions T Series readers versions prior to v8.20.200221b T Series readers versions prior to vGR8.10.179 T Series readers versions prior to vGR8.00.165 T Series readers versions prior to vGR7.90.165 T Series readers version v7.80 or earlier

Description It is possible to retrieve site keys used for securing MIFARE Plus and Desfire using debug ports on T Series readers.

Recommendations For versions prior to v8.20.200221b, update to v8.20.200221b or later. For versions prior to vGR8.10.179, update to vGR8.10.179 or later. For versions prior to vGR8.00.165, update to vGR8.00.165 or later. For versions prior to vGR7.90.165, update to vGR7.90.165 or later. For version v7.80 or earlier, update to a version later than v7.80.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2020-16097

Affected Products

T Series Readers

References · 3

• https://osv.dev/vulnerability/CVE-2020-16097 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-16097 · Security Note
• https://security.gallagher.com/Security-Advisories/CVE-2020-16097 · Vendor Advisory