返回安全门户

Secret information leak via USB Descriptors

报告时间：January 2, 2019

The attack used specialized hardware to inject a fault into the comparison function in the USB stack. When timed properly, an attacker could trick USB stack into returning sensitive data via USB in the USB descriptor.

Fixed in firmwares 1.8.0 for Model One (22f37e8) and 2.1.0 for Model T (828ba7b).

Read more at our blog or at Colin's.

报告人 Colin O'Flynn
Trezor Model One, Trezor Model T

已修复的漏洞

由社区报告，经调查后已解决。因为您的安全永远不可妥协。