CVE-2015-1878

Thales nShield Connect hardware models 500, 1500, 6000, 500+, 1500+, and 6000+ before 11.72 allows physically proximate attackers to sign arbitrary data with previously loaded signing keys, extract the device identification key [KNETI] and impersonate the nShield Connect device on a network, affect the integrity and confidentiality of newly created keys, and potentially cause other unspecified impacts using previously loaded keys by connecting to the USB port on the front panel.

CVSS v3 6.8 MEDIUM
CVSS v2.0 4.6 MEDIUM

6.8^/10

CVSS v3 : MEDIUM

V3 Legend

Vector : AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability : 0.9 / Impact : 5.9

Attack Vector PHYSICAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

4.6^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 3.9 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.securitytracker.com/id/1032152	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1032152	Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:thalesesecurity:nshield_connect_firmware:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:thalesesecurity:nshield_connect_1500:-:::::::*
	cpe:2.3:h:thalesesecurity:nshield_connect_1500\+:-:::::::*
	cpe:2.3:h:thalesesecurity:nshield_connect_500:-:::::::*
	cpe:2.3:h:thalesesecurity:nshield_connect_500\+:-:::::::*
	cpe:2.3:h:thalesesecurity:nshield_connect_6000:-:::::::*
	cpe:2.3:h:thalesesecurity:nshield_connect_6000\+:-:::::::*

History

21 Nov 2024, 02:26

Type	Values Removed	Values Added
References	~~() http://www.securitytracker.com/id/1032152 - Third Party Advisory, VDB Entry~~	() http://www.securitytracker.com/id/1032152 - Third Party Advisory, VDB Entry

Information

Published : 2017-08-18 16:29

Updated : 2025-04-20 01:37

NVD link : CVE-2015-1878

Mitre link : CVE-2015-1878

CVE.ORG link : CVE-2015-1878

JSON object : View

Products Affected

thalesesecurity

nshield_connect_6000\+
nshield_connect_6000
nshield_connect_1500
nshield_connect_firmware
nshield_connect_1500\+
nshield_connect_500\+
nshield_connect_500

CWE

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2015-1878", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 6.8, "attackVector": "PHYSICAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.9}]}, "published": "2017-08-18T16:29:00.263", "references": [{"url": "http://www.securitytracker.com/id/1032152", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id/1032152", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "Thales nShield Connect hardware models 500, 1500, 6000, 500+, 1500+, and 6000+ before 11.72 allows physically proximate attackers to sign arbitrary data with previously loaded signing keys, extract the device identification key [KNETI] and impersonate the nShield Connect device on a network, affect the integrity and confidentiality of newly created keys, and potentially cause other unspecified impacts using previously loaded keys by connecting to the USB port on the front panel."}, {"lang": "es", "value": "Thales nShield Connect hardware modelos 500, 1500, 6000, 500+, 1500+, y 6000+ anteriores a la versi\u00f3n 11.72 permite que atacantes f\u00edsicamente cercanos firmen datos arbitrarios con claves de firma previamente cargadas, extraer la clave de identificaci\u00f3n del dispositivo [KNETI] y suplantar el dispositivo nShield Connect en una red, afectar la integridad y confidencialidad de las claves recientemente creadas, y provocar otros impactos sin especificar empleando claves previamente cargadas conectando el dispositivo al puerto USB en el panel frontal."}], "lastModified": "2025-04-20T01:37:25.860", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:thalesesecurity:nshield_connect_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E89E8BD0-A35C-4EAE-8C19-87F9580DD3FE", "versionEndIncluding": "11.30"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:thalesesecurity:nshield_connect_1500:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4E00A4CC-188A-41AA-9A1C-5DF1031660B3"}, {"criteria": "cpe:2.3:h:thalesesecurity:nshield_connect_1500\\+:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "952078A8-CAF8-40F5-9EFA-9988AF3F61EC"}, {"criteria": "cpe:2.3:h:thalesesecurity:nshield_connect_500:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DD310DDC-1629-4DE9-8744-1B7E6E510435"}, {"criteria": "cpe:2.3:h:thalesesecurity:nshield_connect_500\\+:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D5474A3E-4D01-4602-A68B-AD4B5110587A"}, {"criteria": "cpe:2.3:h:thalesesecurity:nshield_connect_6000:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "023DBB90-B8D7-4F07-A902-CCEF26D50BC1"}, {"criteria": "cpe:2.3:h:thalesesecurity:nshield_connect_6000\\+:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "076633B9-52DD-40A6-8A79-9380246A77C3"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}

6.8 /10