Known Vulnerabilities for products from Ledger
Listed below are 3 of the newest known vulnerabilities associated with the vendor "Ledger".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Additional devices specifications by Ledger can be found at device.report : Ledger
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2020-12119 json | Ledger Live before 2.7.0 does not handle Bitcoin's Replace-By-Fee (RBF). It increases the user's balance with the value of an... | 8.1 - HIGH | 2020-07-02 | 2020-07-08 |
| CVE-2020-6861 json | A flawed protocol design in the Ledger Monero app before 1.5.1 for Ledger Nano and Ledger S devices allows a local attacker t... | 5.5 - MEDIUM | 2020-05-06 | 2021-07-21 |
| CVE-2019-14354 json | On Ledger Nano S and Nano X devices, a side channel for the row-based OLED display was found. The power consumption of each r... | 2.4 - LOW | 2019-08-10 | 2021-07-21 |
Known software with vulnerabilities from Ledger
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Ledger | Ledger Live | - |
| Application | Ledger | Monero | - |
| Hardware | Ledger | Nano S | - |
| Operating System | Ledger | Nano S Firmware | - |
| Hardware | Ledger | Nano X | - |
| Operating System | Ledger | Nano X Firmware | - |