Infineon RSA Library CVE-2017-15361 Cryptographic Security Bypass Vulnerability
BID:101484
Info
Infineon RSA Library CVE-2017-15361 Cryptographic Security Bypass Vulnerability
| Bugtraq ID: | 101484 |
| Class: | Design Error |
| CVE: |
CVE-2017-15361 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 16 2017 12:00AM |
| Updated: | Oct 23 2017 08:04PM |
| Credit: | Matus Nemec, Marek Sys, Petr Svenda, Dusan Klinec, and Vashek Matyas. |
| Vulnerable: |
Yubico Yubikey 4c 4.3.4 Yubico Yubikey 4c 4.2.6 Yubico Yubikey 4 nano 4.3.4 Yubico Yubikey 4 nano 4.2.6 Yubico Yubikey 4 4.3.4 Yubico Yubikey 4 4.2.6 Lenovo ThinkPad Yoga 260 S1 0 Lenovo ThinkPad Yoga 14 460 S3 0 Lenovo ThinkPad Yoga 11e 0 Lenovo ThinkPad X260 0 Lenovo ThinkPad X1 Tablet 0 Lenovo ThinkPad X1 Carbon 0 Lenovo ThinkPad T560 0 Lenovo ThinkPad T470p 0 Lenovo ThinkPad T460s 0 Lenovo ThinkPad P70 0 Lenovo ThinkPad P51 0 Lenovo ThinkPad P50s 0 Lenovo ThinkPad P50 0 Lenovo ThinkPad L570 0 Lenovo ThinkPad L560 0 Lenovo ThinkPad L470 0 Lenovo ThinkPad L460 0 Lenovo ThinkPad E565 0 Lenovo Thinkpad E560 0 Lenovo ThinkPad E465 0 Lenovo ThinkPad E460 0 Lenovo ThinkPad 11e 0 Infineon RSA Library 1.2.13 HP Trusted Platform Module Option kit 2.0 HP SLB 9670 (TPM 2.0) 0 HP SLB 9670 (TPM 1.2) 0 HP SLB 9665 (TPM 2.0) 0 HP SLB 9660 (TPM 1.2) 0 HP Mobile Workstation 0 HP Mobile Thin Client and Tablet 0 HP Commercial Notebook PC 0 Google Chrome OS M63 Google Chrome OS M62 Google Chrome OS M61 Gemalto IDPrime.NET 0 Fujitsu TPM (Trusted Platform Module)2.0 FW7.61 Fujitsu TPM (Trusted Platform Module)2.0 FW7.00 Fujitsu TPM (Trusted Platform Module)2.0 FW5.61 Fujitsu TPM (Trusted Platform Module)2.0 FW5.00 Fujitsu TPM (Trusted Platform Module)1.2 FW6.42 Fujitsu TPM (Trusted Platform Module)1.2 FW6.00 Fujitsu TPM (Trusted Platform Module)1.2 FW4.42 Fujitsu TPM (Trusted Platform Module)1.2 FW4.40 Fujitsu TPM (Trusted Platform Module)1.2 FW4.33 Fujitsu TPM (Trusted Platform Module)1.2 FW4.00 Fujitsu TPM (Trusted Platform Module)1.2 FW149.32 Fujitsu TPM (Trusted Platform Module)1.2 FW133.32 |
| Not Vulnerable: |
Google Chrome OS M80 |
Discussion
Infineon RSA Library CVE-2017-15361 Cryptographic Security Bypass Vulnerability
Infineon RSA Library is prone to a security-bypass vulnerability.
Attackers can exploit this issue to bypass certain security restrictions to perform unauthorized actions. This may aid in further attacks.
Infineon RSA Library 1.02.013 is vulnerable; other versions may also be affected.
Infineon RSA Library is prone to a security-bypass vulnerability.
Attackers can exploit this issue to bypass certain security restrictions to perform unauthorized actions. This may aid in further attacks.
Infineon RSA Library 1.02.013 is vulnerable; other versions may also be affected.
Solution / Fix
Infineon RSA Library CVE-2017-15361 Cryptographic Security Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.