CVE-2020-6861

A flawed protocol design in the Ledger Monero app before 1.5.1 for Ledger Nano and Ledger S devices allows a local attacker to extract the master spending key…

published May 6, 2020

CVSS
—
EPSS
0%
Percentile
37.3
In the wild
Unconfirmed
What it is

A flawed protocol design in the Ledger Monero app before 1.5.1 for Ledger Nano and Ledger S devices allows a local attacker to extract the master spending key by sending crafted messages to this app selected on a PIN-entered Ledger connected to a host PC.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00441 · 37.3th percentile
Published
2020-05-06T13:15Z
EPSS history
Timeline
  • 06 MAY 13:15Z
    A flawed protocol design in the Ledger Monero app before 1.5.1 for Ledger Nano and Ledger S devices allows a local attacker to extract the master spending key…
    cvelistv5