1. Home
  2. CVE Database
  3. CVE-2015-1878
MEDIUM · 6.8

CVE-2015-1878

Thales nShield Connect hardware models 500, 1500, 6000, 500+, 1500+, and 6000+ before 11.72 allows physically proximate attackers to sign arbitrary data with previously loaded signing keys, extract th...

Vulnerability Description

Thales nShield Connect hardware models 500, 1500, 6000, 500+, 1500+, and 6000+ before 11.72 allows physically proximate attackers to sign arbitrary data with previously loaded signing keys, extract the device identification key [KNETI] and impersonate the nShield Connect device on a network, affect the integrity and confidentiality of newly created keys, and potentially cause other unspecified impacts using previously loaded keys by connecting to the USB port on the front panel.

CVSS Score

6.8

MEDIUM

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
ThalesesecurityNshield Connect Firmware<= 11.30
ThalesesecurityNshield Connect 1500-
ThalesesecurityNshield Connect 1500\+-
ThalesesecurityNshield Connect 500-
ThalesesecurityNshield Connect 500\+-
ThalesesecurityNshield Connect 6000-
ThalesesecurityNshield Connect 6000\+-

Related Weaknesses (CWE)

CWE-264

References

FAQ

What is CVE-2015-1878?

CVE-2015-1878 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Thales nShield Connect hardware models 500, 1500, 6000, 500+, 1500+, and 6000+ before 11.72 allows physically proximate attackers to sign arbitrary data with previously loaded signing keys, extract th...

How severe is CVE-2015-1878?

CVE-2015-1878 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2015-1878?

Check the references section above for vendor advisories and patch information. Affected products include: Thalesesecurity Nshield Connect Firmware, Thalesesecurity Nshield Connect 1500, Thalesesecurity Nshield Connect 1500\+, Thalesesecurity Nshield Connect 500, Thalesesecurity Nshield Connect 500\+.