ShapeShift KeepKey Firmware
Approved changes feed: RSS · Atom
cpe:2.3:h:shapeshift:keepkey_firmware:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Shapeshift (8952567a-243f-52b4-a5eb-ca24562b2bb0) |
|---|---|
| Product | Keepkey Firmware (eb2b1168-cc32-5404-a403-dac3b320ffdb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-18672 |
not_vulnerable | 2026-06-08 05:13:12.068890 |
Details available
Insufficient checks in the finite state machine of the ShapeShift KeepKey hardware wallet before firmware 6.2.2 allow a partial reset of cryptographic secrets to known values via crafted messages. Notably, this breaks the security of U2F for new server registrations and invalidates existing registrations. This vulnerability can be exploited by unauthenticated attackers and the interface is reachable via WebUSB.
Published: 2019-12-06T17:54:54.000Z
Updated: 2024-08-05T01:54:14.478Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.