Description (CNA)
HiCOS’ client-side citizen certificate component has a double free vulnerability. An unauthenticated physical attacker can exploit this vulnerability to corrupt memory and execute arbitrary code, manipulate system data or terminate service.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| HINET / HiCOS’ client-side citizen digital certificate | affected unspecified through 11 3.0.3.30306 |
| HINET / HiCOS’ client-side citizen digital certificate | affected unspecified through 11 3.1.0.00002 |
| HINET / HiCOS’ client-side citizen digital certificate | affected unspecified through 11 3.0.3.30404 |
CWE
CWE-415
References
ADP enrichment
No English description supplied.