EMV Protocol PIN Verification Bypass Vulnerability

Bugtraq ID:	38231
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Feb 12 2010 12:00AM
Updated:	Feb 12 2010 12:00AM
Credit:	Steven J. Murdoch, Saar Drimer, Ross Anderson, and Mike Bond
Vulnerable:	EMVCo EMV 0
Not Vulnerable:

EMV Protocol PIN Verification Bypass Vulnerability

The EMV "Chip and PIN" protocol is prone to a security-bypass vulnerability.

Attackers who can perform physical man-in-the-middle attacks between a smartcard and a terminal can exploit this issue to cause the card reader terminal to accept an incorrect PIN for the smartcard. This may aid the attacker in committing fraud.

EMV Protocol PIN Verification Bypass Vulnerability

A working attack using easily available hardware has been demonstrated.

EMV Protocol PIN Verification Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

EMV Protocol PIN Verification Bypass Vulnerability

References:

• Cambridge researchers show that the Chip and PIN system is vulnerable to fraud (Steven J. Murdoch, Saar Drimer, Ross Anderson, and Mike Bond)
  
• Chip and PIN is Broken (Steven J. Murdoch, Saar Drimer, Ross Anderson, and Mike Bond)
  
• EMV PIN verification �??wedge�?� vulnerability (Steven J. Murdoch, Saar Drimer, Ross Anderson, and Mike Bond)
  
• EMVCo Homepage (EMVCo)