Read the docs

Ledger

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Ledger records in CISA KEV

No Ledger vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Monero · all components

Priority LOW 25

A flawed protocol design in the Ledger Monero app before 1.5.1 for Ledger Nano and Ledger S devices allows a local attacker to extract the master spending key by sending crafted messages to this app selected on a PIN-ent…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00441 Published 2020-05-06 No fix listed CWE-327
Open these records in search →