Approved changes feed: RSS · Atom
cpe:2.3:o:siemens:cardos:m4:*:*:*:*:*:*:*
part: o version: m4 update: *
| Vendor | Siemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f) |
|---|---|
| Product | Cardos (89030794-4811-5429-8d20-e10d94e3d4f7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-3972 |
not_vulnerable | 2026-06-08 04:50:37.411086 |
Details available
pkcs15-tool in OpenSC before 0.11.6 does not apply security updates to a smart card unless the card's label matches the "OpenSC" string, which might allow physically proximate attackers to exploit vulnerabilities that the card owner expected were patched, as demonstrated by exploitation of CVE-2008-2235.
Published: 2008-09-10T15:00:00.000Z
Updated: 2024-08-07T10:00:42.172Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-2235 |
not_vulnerable | 2026-06-08 04:50:23.267691 |
Details available
OpenSC before 0.11.5 uses weak permissions (ADMIN file control information of 00) for the 5015 directory on smart cards and USB crypto tokens running Siemens CardOS M4, which allows physically proximate attackers to change the PIN.
Published: 2008-08-01T14:00:00.000Z
Updated: 2024-08-07T08:49:58.703Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.