CVE-2000-0427 The Aladdin Knowledge Systems eToken device allows attackers with physical access to the device to obtain sensitive information without knowing the PIN of the owner by resetting the PIN in the EEPROM.
MediumCVSS 4.6
EPSS 0.76%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The Aladdin Knowledge Systems eToken device allows attackers with physical access to the device to obtain sensitive information without knowing the PIN of the owner by resetting the PIN in the EEPROM.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aladdin knowledge systems etoken | = 3.3.3 | No fix listed |
References
- 20000504 eToken Private Information Extraction and Physical Attack vendor-advisory
- 3266 vdb-entry
- 1170 vdb-entry