CVE-2024-45617

Summary

CVE-2024-45617 is a vulnerability affecting OpenSC, its tools, the PKCS#11 module, minidriver, and CTK. The issue arises from insufficient checking of return values of functions, allowing an attacker to exploit the system using a specially crafted USB device or smart card that responds with manipulated APDUs. This vulnerability has a low base severity rating of 3.9 and requires physical access to exploit, making it complex to attack. Organizations can mitigate this risk by ensuring proper validation and handling of input from USB devices and smart cards. While the potential impacts on confidentiality, integrity, and availability are categorized as low, organizations should remain vigilant due to the nature of physical access required for exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.