Voltar para o portal de segurança

SRAM dump via glitching the firmware update

Reportado em December 27, 2018

Using a special glitching hardware an attacker could trick the device processor into Read Protection level 1 which allows readout of RAM. The issue was fixed by not storing sensitive data in RAM during the firmware update.

Fixed in firmware 1.8.0.

Reportado por wallet.fail
Trezor Model One, Trezor Model T

Vulnerabilidades resolvidas

Reportado pela comunidade. Investigado. Resolvido. Porque sua segurança nunca é opcional.