keepkey records

3 published records for vendor keepkey.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2019-18671No exploit	Insufficient checks in the USB packet handling of the ShapeShift KeepKey hardware wallet before firmware 6.2.2 allow out-of-bounds writes inkeepkey · keepkey firmware · CWE-787 Pre-auth Memory safety	Critical9.8	—	3.3%	Dec 6, 2019
30Monitor	CVE-2018-6875No exploit	Format String vulnerability in KeepKey version 4.0.0 allows attackers to trigger information display (of information that should not be accekeepkey · keepkey · CWE-134 Pre-auth	High7.5	—	1.1%	Mar 14, 2018
26Monitor	CVE-2022-30330No exploit	In the KeepKey firmware before 7.3.2,Flaws in the supervisor interface can be exploited to bypass important security restrictions on firmwarkeepkey · keepkey firmware · CWE-20	Medium6.6	—	0.5%	May 7, 2022

CVE-2019-18671
40Plan
Insufficient checks in the USB packet handling of the ShapeShift KeepKey hardware wallet before firmware 6.2.2 allow out-of-bounds writes in
CriticalCVSS 9.8No exploitEPSS 3%
- Pre-auth
- Memory safety
keepkey · keepkey firmwareDec 6, 2019
CVE-2018-6875
30Monitor
Format String vulnerability in KeepKey version 4.0.0 allows attackers to trigger information display (of information that should not be acce
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
keepkey · keepkeyMar 14, 2018
CVE-2022-30330
26Monitor
In the KeepKey firmware before 7.3.2,Flaws in the supervisor interface can be exploited to bypass important security restrictions on firmwar
MediumCVSS 6.6No exploitEPSS 1%
keepkey · keepkey firmwareMay 7, 2022