Keepkey Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:keepkey:keepkey_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Keepkey (68f4975b-1ab5-52dd-a2be-9993f6f591e7) |
|---|---|
| Product | Keepkey Firmware (3badd393-f09c-56b0-8230-83e852192f88) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-30330 |
vulnerable | 2026-06-08 05:43:37.960491 |
Details available
In the KeepKey firmware before 7.3.2,Flaws in the supervisor interface can be exploited to bypass important security restrictions on firmware operations. Using these flaws, malicious firmware code can elevate privileges, permanently make the device inoperable or overwrite the trusted bootloader code to compromise the hardware wallet across reboots or storage wipes.
Published: 2022-05-07T03:25:34.000Z
Updated: 2024-08-03T06:48:35.769Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18671 |
vulnerable | 2026-06-08 05:13:12.065673 |
Details available
Insufficient checks in the USB packet handling of the ShapeShift KeepKey hardware wallet before firmware 6.2.2 allow out-of-bounds writes in the .bss segment via crafted messages. The vulnerability could allow code execution or other forms of impact. It can be triggered by unauthenticated attackers and the interface is reachable via WebUSB.
Published: 2019-12-06T17:53:29.000Z
Updated: 2024-08-05T01:54:14.598Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.