CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-3798

A flaw was found in openCryptoki. The openCryptoki Soft token does not check if an EC key is valid when an EC key is created via C_CreateObject, nor when C_DeriveKey is used with ECDH public data. This may allow a malicious user to extract the private key by performing an invalid curve attack.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 15.3%

CVSS Severity

CVSS v3 Score 5.5

References

Products affected by CVE-2021-3798

Opencryptoki Project » Opencryptoki » Version: N/A

cpe:2.3:a:opencryptoki_project:opencryptoki:-
Opencryptoki Project » Opencryptoki » Version: 2.3.2

cpe:2.3:a:opencryptoki_project:opencryptoki:2.3.2
Opencryptoki Project » Opencryptoki » Version: 2.3.3

cpe:2.3:a:opencryptoki_project:opencryptoki:2.3.3
Opencryptoki Project » Opencryptoki » Version: 2.4.2

cpe:2.3:a:opencryptoki_project:opencryptoki:2.4.2
Opencryptoki Project » Opencryptoki » Version: 2.4.3

cpe:2.3:a:opencryptoki_project:opencryptoki:2.4.3
Opencryptoki Project » Opencryptoki » Version: 2.4.3.1

cpe:2.3:a:opencryptoki_project:opencryptoki:2.4.3.1
Opencryptoki Project » Opencryptoki » Version: 3.0

cpe:2.3:a:opencryptoki_project:opencryptoki:3.0
Opencryptoki Project » Opencryptoki » Version: 3.1

cpe:2.3:a:opencryptoki_project:opencryptoki:3.1
Opencryptoki Project » Opencryptoki » Version: 3.10.0

cpe:2.3:a:opencryptoki_project:opencryptoki:3.10.0
Opencryptoki Project » Opencryptoki » Version: 3.11.0

cpe:2.3:a:opencryptoki_project:opencryptoki:3.11.0
Opencryptoki Project » Opencryptoki » Version: 3.11.1

cpe:2.3:a:opencryptoki_project:opencryptoki:3.11.1
Opencryptoki Project » Opencryptoki » Version: 3.12.0

cpe:2.3:a:opencryptoki_project:opencryptoki:3.12.0
Opencryptoki Project » Opencryptoki » Version: 3.12.1

cpe:2.3:a:opencryptoki_project:opencryptoki:3.12.1
Opencryptoki Project » Opencryptoki » Version: 3.13.0

cpe:2.3:a:opencryptoki_project:opencryptoki:3.13.0
Opencryptoki Project » Opencryptoki » Version: 3.14.0

cpe:2.3:a:opencryptoki_project:opencryptoki:3.14.0
Opencryptoki Project » Opencryptoki » Version: 3.15.0

cpe:2.3:a:opencryptoki_project:opencryptoki:3.15.0
Opencryptoki Project » Opencryptoki » Version: 3.15.1

cpe:2.3:a:opencryptoki_project:opencryptoki:3.15.1
Opencryptoki Project » Opencryptoki » Version: 3.16.0

cpe:2.3:a:opencryptoki_project:opencryptoki:3.16.0
Opencryptoki Project » Opencryptoki » Version: 3.2

cpe:2.3:a:opencryptoki_project:opencryptoki:3.2
Opencryptoki Project » Opencryptoki » Version: 3.3

cpe:2.3:a:opencryptoki_project:opencryptoki:3.3
Opencryptoki Project » Opencryptoki » Version: 3.4

cpe:2.3:a:opencryptoki_project:opencryptoki:3.4
Opencryptoki Project » Opencryptoki » Version: 3.4.1

cpe:2.3:a:opencryptoki_project:opencryptoki:3.4.1
Opencryptoki Project » Opencryptoki » Version: 3.5

cpe:2.3:a:opencryptoki_project:opencryptoki:3.5
Opencryptoki Project » Opencryptoki » Version: 3.6

cpe:2.3:a:opencryptoki_project:opencryptoki:3.6
Opencryptoki Project » Opencryptoki » Version: 3.6.1

cpe:2.3:a:opencryptoki_project:opencryptoki:3.6.1
Opencryptoki Project » Opencryptoki » Version: 3.6.2

cpe:2.3:a:opencryptoki_project:opencryptoki:3.6.2
Opencryptoki Project » Opencryptoki » Version: 3.7.0

cpe:2.3:a:opencryptoki_project:opencryptoki:3.7.0
Opencryptoki Project » Opencryptoki » Version: 3.8.0

cpe:2.3:a:opencryptoki_project:opencryptoki:3.8.0
Opencryptoki Project » Opencryptoki » Version: 3.8.1

cpe:2.3:a:opencryptoki_project:opencryptoki:3.8.1
Opencryptoki Project » Opencryptoki » Version: 3.8.2

cpe:2.3:a:opencryptoki_project:opencryptoki:3.8.2
Opencryptoki Project » Opencryptoki » Version: 3.9.0

cpe:2.3:a:opencryptoki_project:opencryptoki:3.9.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-3798

Products

Pricing

Contact Us