Smart cards from the Athena SCS manufacturer, based on the Atmel Toolbox 00.03.11.05 and…
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- High
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-203.
Summary
Smart cards from the Athena SCS manufacturer, based on the Atmel Toolbox 00.03.11.05 and the AT90SC chip, contain a timing side channel in ECDSA signature generation. This allows a local attacker, able to measure the duration of hundreds to thousands of signing operations, to compute the private key used. The issue occurs because the Atmel Toolbox 00.03.11.05 contains two versions of ECDSA signature functions, described as fast and secure, but the affected cards chose to use the fast version, which leaks the bit length of the random nonce via timing. This affects Athena IDProtect 010b.0352.0005, Athena IDProtect 010e.1245.0002, Athena IDProtect 0106.0130.0401, Athena IDProtect 010e.1245.0002, Valid S/A IDflex V 010b.0352.0005, SafeNet eToken 4300 010e.1245.0002, TecSec Armored Card 010e.0264.0001, and TecSec Armored Card 108.0264.0001.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 8
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:microchip:atmel_toolbox:00.03.11.05:*:*:*:*:*:*:* | 00.03.11.05 | Vulnerable | Microchip |
| cpe:2.3:o:athena-scs:idprotect:010b.0352.0005:*:*:*:*:*:*:* | 010b.0352.0005 | Vulnerable | Athena-scs |
| cpe:2.3:o:athena-scs:idprotect:010e.1245.0002:*:*:*:*:*:*:* | 010e.1245.0002 | Vulnerable | Athena-scs |
| cpe:2.3:o:athena-scs:idprotect:0106.0130.0401:*:*:*:*:*:*:* | 0106.0130.0401 | Vulnerable | Athena-scs |
| cpe:2.3:o:cryptsoft:s\/a_idflex_v:010b.0352.0005:*:*:*:*:*:*:* | 010b.0352.0005 | Vulnerable | Cryptsoft |
| cpe:2.3:o:tecsec:armored_card:010e.0264.0001:*:*:*:*:*:*:* | 010e.0264.0001 | Vulnerable | Tecsec |
| cpe:2.3:o:tecsec:armored_card:108.0264.0001:*:*:*:*:*:*:* | 108.0264.0001 | Vulnerable | Tecsec |
| cpe:2.3:o:thalesgroup:etoken_4300:010e.1245.0002:*:*:*:*:*:*:* | 010e.1245.0002 | Vulnerable | Thales |
- cpe:2.3:a:microchip:atmel_toolbox:00.03.11.05:*:*:*:*:*:*:* Versions 00.03.11.05 Vulnerable ·Microchip
- cpe:2.3:o:athena-scs:idprotect:010b.0352.0005:*:*:*:*:*:*:* Versions 010b.0352.0005 Vulnerable ·Athena-scs
- cpe:2.3:o:athena-scs:idprotect:010e.1245.0002:*:*:*:*:*:*:* Versions 010e.1245.0002 Vulnerable ·Athena-scs
- cpe:2.3:o:athena-scs:idprotect:0106.0130.0401:*:*:*:*:*:*:* Versions 0106.0130.0401 Vulnerable ·Athena-scs
- cpe:2.3:o:cryptsoft:s\/a_idflex_v:010b.0352.0005:*:*:*:*:*:*:* Versions 010b.0352.0005 Vulnerable ·Cryptsoft
- cpe:2.3:o:tecsec:armored_card:010e.0264.0001:*:*:*:*:*:*:* Versions 010e.0264.0001 Vulnerable ·Tecsec
- cpe:2.3:o:tecsec:armored_card:108.0264.0001:*:*:*:*:*:*:* Versions 108.0264.0001 Vulnerable ·Tecsec
- cpe:2.3:o:thalesgroup:etoken_4300:010e.1245.0002:*:*:*:*:*:*:* Versions 010e.1245.0002 Vulnerable ·Thales
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2019-15809
- 2026-10-03 Alias added: GHSA-c76g-76cj-g742
References
Exploit 1
Advisory 4
Sources
- CVE-2019-15809 · CVE Program
- CVE-2019-15809 · NVD
- FIRST EPSS
- GHSA-c76g-76cj-g742 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences