Approved changes feed: RSS · Atom

cpe:2.3:o:protectimus:slim_nfc_70_firmware:10.01:*:*:*:*:*:*:*

part: o version: 10.01 update: *

VendorProtectimus (0e60b91c-3284-5500-9585-63f7ce8bb5a9)
ProductSlim Nfc 70 Firmware (ccbbc8a6-b6d8-5f72-b689-6dfcdc787f2d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-32033 vulnerable 2026-06-08 05:31:54.636587 Details available
Protectimus SLIM NFC 70 10.01 devices allow a Time Traveler attack in which attackers can predict TOTP passwords in certain situations. The time value used by the device can be set independently from the used seed value for generating time-based one-time passwords, without authentication. Thus, an attacker with short-time physical access to a device can set the internal real-time clock (RTC) to the future, generate one-time passwords, and reset the clock to the current time. This allows the generation of valid future time-based one-time passwords without having further access to the hardware token.
Published: 2021-06-16T11:35:59.000Z
Updated: 2024-08-03T23:17:29.385Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.