Dallas Semiconductor iButton DS1991 returns predictable values when given an incorrect password, which makes it easier for users with physical access to conduct dictionary attacks against the device password.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ibutton | Dallas_semiconductor | ds1991 (including) | ds1991 (including) |
References
- http://www.atstake.com/research/advisories/2001/a011801-1.txt
- http://www.kb.cert.org/vuls/id/178560
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10625
- http://www.atstake.com/research/advisories/2001/a011801-1.txt
- http://www.kb.cert.org/vuls/id/178560
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10625