CVE-2023-40661

Summary

CVE-2023-40661 refers to multiple memory vulnerabilities discovered in the OpenSC packages, specifically during the card enrollment process using pkcs15-init. An attacker who gains physical access to a system can exploit these flaws with a custom-crafted USB device or smart card by manipulating responses to APDUs. Successful exploitation may result in compromised key generation, certificate loading, and other card management operations during enrollment.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.