Ledger records
3 published records for vendor ledger.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-203 Observable Discrepancy1
- CWE-327 Use of a Broken or Risky Cryptographic Algorithm1
- CWE-345 Insufficient Verification of Data Authenticity1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
32Monitor | CVE-2020-12119No exploit | Ledger Live before 2.7.0 does not handle Bitcoin's Replace-By-Fee (RBF).ledger · ledger live · CWE-345 | High8.1 | — | 0.5% | Jul 2, 2020 |
22Monitor | CVE-2020-6861Proof of concept | A flawed protocol design in the Ledger Monero app before 1.5.1 for Ledger Nano and Ledger S devices allows a local attacker to extract the mledger · monero · CWE-327 | Medium5.5 | — | 0.4% | May 6, 2020 |
9Monitor | CVE-2019-14354No exploit | On Ledger Nano S and Nano X devices, a side channel for the row-based OLED display was found.ledger · nano s firmware · CWE-203 | Low2.4 | — | 0.3% | Aug 10, 2019 |
- CVE-2020-1211932Monitor
Ledger Live before 2.7.0 does not handle Bitcoin's Replace-By-Fee (RBF).
HighCVSS 8.1No exploitEPSS 0%ledger · ledger liveJul 2, 2020
- CVE-2020-686122Monitor
A flawed protocol design in the Ledger Monero app before 1.5.1 for Ledger Nano and Ledger S devices allows a local attacker to extract the m
MediumCVSS 5.5Proof of conceptEPSS 0%ledger · moneroMay 6, 2020
- CVE-2019-143549Monitor
On Ledger Nano S and Nano X devices, a side channel for the row-based OLED display was found.
LowCVSS 2.4No exploitEPSS 0%ledger · nano s firmwareAug 10, 2019