返回安全门户

SRAM dump via glitching the firmware update

报告时间:December 27, 2018

Using a special glitching hardware an attacker could trick the device processor into Read Protection level 1 which allows readout of RAM. The issue was fixed by not storing sensitive data in RAM during the firmware update.

Fixed in firmware 1.8.0.

报告人 wallet.fail
Trezor Model One, Trezor Model T