PT-2022-20066 · Keepkey · Keepkey

Christian Reitter · Published 2022-05-07 · Updated 2023-08-08 · CVE-2022-30330

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions KeepKey firmware versions prior to 7.3.2

Description The issue is related to flaws in the supervisor interface of the KeepKey firmware, which can be exploited to bypass security restrictions on firmware operations. This can allow malicious firmware code to elevate privileges, make the device inoperable, or overwrite the trusted bootloader code, compromising the hardware wallet across reboots or storage wipes. The exploitation may require physical access, convincing the victim to install malicious firmware, or knowledge of the victim's seed phrase. The svhandler flash * address range checks in lib/board/supervise.c are mishandled, potentially allowing installed malware to persist even after wiping the device and resetting the firmware.

Recommendations For KeepKey firmware versions prior to 7.3.2, update to version 7.3.2 or later to resolve the issue. As a temporary workaround, consider restricting physical access to the device and avoiding installation of unknown or untrusted firmware.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2022-30330

Affected Products

Keepkey

References · 10

• 🔥 https://blog.inhq.net/posts/keepkey-CVE-2022-30330 · Exploit
• https://github.com/keepkey/keepkey-firmware/commit/447c1f038a31378ab9589965c098467d9ea6cccc · Patch
• https://osv.dev/vulnerability/CVE-2022-30330 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-30330 · Security Note
• https://github.com/keepkey/keepkey-firmware/releases/tag/v7.3.2 · Note
• https://t.me/cvenotify/30423 · Telegram Post
• https://t.me/cvenotify/29881 · Telegram Post
• https://t.me/cvenotify/30315 · Telegram Post
• https://t.me/cvenotify/29831 · Telegram Post
• https://t.me/cvenotify/29874 · Telegram Post