CVE-2019-14354— Ledger SAS Nano S和Nano X 信息泄露漏洞

N/A

On Ledger Nano S and Nano X devices, a side channel for the row-based OLED display was found. The power consumption of each row-based display cycle depends on the number of illuminated pixels, allowing a partial recovery of display contents. For example, a hardware implant in the USB cable might be able to leverage this behavior to recover confidential secrets such as the PIN and BIP39 mnemonic. In other words, the side channel is relevant only if the attacker has enough control over the device's USB connection to make power-consumption measurements at a time when secret data is displayed. The side channel is not relevant in other circumstances, such as a stolen device that is not currently displaying secret data.

N/A

N/A

Ledger SAS Nano S和Nano X 信息泄露漏洞

Ledger SAS Nano S和Nano X都是法国Ledger SAS公司的一款用于存储加密货币的电子钱包设备。 Ledger SAS Nano S和Nano X中存在信息泄露漏洞。该漏洞源于网络系统或产品在运行过程中存在配置等错误。未授权的攻击者可利用漏洞获取受影响组件敏感信息。

N/A

N/A