Approved changes feed: RSS · Atom

cpe:2.3:o:satoshilabs:trezor_one_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorSatoshilabs (908d1e34-5411-541d-96ac-7ffa653da71b)
ProductTrezor One Firmware (14a423be-8577-5770-8813-85a731f2afb5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-14199 vulnerable 2026-06-08 05:19:22.689846 Details available
BIP-143 in the Bitcoin protocol specification mishandles the signing of a Segwit transaction, which allows attackers to trick a user into making two signatures in certain cases, potentially leading to a huge transaction fee. NOTE: this affects all hardware wallets. It was fixed in 1.9.1 for the Trezor One and 2.3.1 for the Trezor Model T.
Published: 2020-06-16T17:07:22.000Z
Updated: 2024-08-04T12:39:36.137Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.