CVE

Id
17642  
CVE No.
CVE-2006-1538  
Status
Candidate  
Description
The Enova X-Wall ASIC encrypts with a key obtained via Microwire from a serial EEPROM that stores the key in cleartext, which allows local users with physical access to obtain the key by reading and duplicating an EEPROM that is located on a hardware token, or by sniffing the Microwire bus.  
Phase
Assigned (20060330)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
147525 17642 CVE-2006-1538 BUGTRAQ:20060329 [HV-INFO] Enova hardware encryption: false sense of security  View
147526 17642 CVE-2006-1538 URL:http://www.securityfocus.com/archive/1/archive/1/429253/100/0/threaded  View
147527 17642 CVE-2006-1538 MISC:http://www.hexview.com/docs/20060328-1.txt  View
147528 17642 CVE-2006-1538 SREASON:648  View
147529 17642 CVE-2006-1538 URL:http://securityreason.com/securityalert/648  View
147530 17642 CVE-2006-1538 XF:enova-xwall-insecure-encryption-key(25527)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58190 JVNDB-2006-000386 Microsoft Office の mso.dll における整数オーバーフローの脆弱性 ------------ CVE-2006-1540 17642 2.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000386.html  View