Kembali ke portal keamanan
Missing confirmation in the ECDHSessionKey call
Dilaporkan pada November 26, 2023
The Trezor Safe 3 returns the ECDHSessionKey without requiring appropriate user interaction, resulting in the omission of address confirmation screens in the user interaction workflow.
This concerns only the SSH functionality in Trezor and was fixed in 2.6.4.
Dilaporkan oleh Mathias Herberts
Trezor Safe 3
Kerentanan yang teratasi
Dilaporkan komunitas. Diselidiki. Diselesaikan. Karena keamanan Anda tidak pernah opsional.
- Authenticity proofs not bounded to their secure element on TS716 Agustus 2026
- THP pairing could be completed without the pairing code22 Juni 2026
- Desktop update could install before signature verification completed16 Juni 2026
- Solana account-creation confirmation completeness14 Juni 2026
- Solana signing display improvement12 Juni 2026
- Coordination fee cap shown on CoinJoin authorization3 Juni 2026