6.4 Medium
CVSS3
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
6.5 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Several memory vulnerabilities were identified within the OpenSC packages,
particularly in the card enrollment process using pkcs15-init when a user
or administrator enrolls cards. To take advantage of these flaws, an
attacker must have physical access to the computer system and employ a
custom-crafted USB device or smart card to manipulate responses to APDUs.
This manipulation can potentially allow compromise key generation,
certificate loading, and other card management operations during
enrollment.
6.4 Medium
CVSS3
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
6.5 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%