Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:ultimaco:block-safe_firmware:2.0.0:*:*:*:*:*:*:*
*cpe:2.3:o:ultimaco:block-safe_firmware:3.0.0:*:*:*:*:*:*:*
*cpe:2.3:o:ultimaco:cryptoserver_cp5_firmware:5.0.0.0:*:*:*:*:*:*:*
*cpe:2.3:o:ultimaco:cryptoserver_cp5_firmware:5.1.0.0:*:*:*:*:*:*:*
*cpe:2.3:o:ultimaco:cryptoserver_cp5_vs-nfd_firmware:5.1.0.0:*:*:*:*:*:*:*
*cpe:2.3:o:ultimaco:paymentserver_firmware:*:*:*:*:*:*:*:* versions from (including) 3.0 up to (including) 4.31.0
*cpe:2.3:o:ultimaco:paymentserver_hybrid_firmware:*:*:*:*:*:*:*:* versions from (including) 3.0 up to (including) 4.33.0
*cpe:2.3:o:ultimaco:securityserver_firmware:*:*:*:*:*:*:*:* versions from (including) 3.0 up to (including) 4.31.1
OR
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
|
Added |
CVSS V2 |
|
NIST (AV:L/AC:M/Au:N/C:P/I:P/A:P)
|
Added |
CVSS V2 Metadata |
|
Victim must voluntarily interact with attack mechanism
|
Added |
CVSS V3.1 |
|
NIST AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
Added |
CWE |
|
NIST CWE-732
|
Changed |
Reference Type |
https://hsm.utimaco.com/products-hardware-security-modules/general-purpose-hsm/ No Types Assigned
|
https://hsm.utimaco.com/products-hardware-security-modules/general-purpose-hsm/ Exploit, Vendor Advisory
|
Changed |
Reference Type |
https://secureyourit.co.uk/wp/2021/03/13/utimaco-cve-2020-26155/ No Types Assigned
|
https://secureyourit.co.uk/wp/2021/03/13/utimaco-cve-2020-26155/ Third Party Advisory
|