Retour au portail de sécurité

SRAM dump via glitching the firmware update

Signalé sur December 27, 2018

Using a special glitching hardware an attacker could trick the device processor into Read Protection level 1 which allows readout of RAM. The issue was fixed by not storing sensitive data in RAM during the firmware update.

Fixed in firmware 1.8.0.

Signalé par wallet.fail
Trezor Model One, Trezor Model T