Major HSM vulnerabilities impact banks, cloud providers, governments

guest · Jun 9, 2019

Major HSM vulnerabilities impact banks, cloud providers, governments
Researchers disclose major vulnerabilities in HSMs (Hardware Security Modules)
June 10, 2019
https://www.zdnet.com/article/major-hsm-vulnerabilities-impact-banks-cloud-providers-governments/

Two security researchers have recently revealed vulnerabilities that can be exploited remotely to retrieve sensitive data stored inside special computer components known as HSMs (Hardware Security Modules).
REMOTE ATTACK DISCOVERED IN ONE HSM BRAND
At a security conference in France this past week, two security researchers from hardware wallet maker Ledger have disclosed details about several vulnerabilities in the HSM of a major vendor.

According to a summary of this upcoming presentation, the vulnerabilities they discovered allow a remote unauthenticated attacker to take full control of the vendor's HSM.
VENDOR UNNAMED -- FOR NOW
The duo, made up by Gabriel Campana and Jean-Baptiste Bédrune, said they reported the findings to the HSM maker, which "published firmware updates with security fixes."
"Perhaps the most concerning part of the attack is that the firmware update backdoor is persistent. There could be live HSMs deployed in critical infrastructure now containing similar backdoors," they added.
Click to expand...

Log in or Sign up

Major HSM vulnerabilities impact banks, cloud providers, governments

guest Guest

Log in or Sign up

Major HSM vulnerabilities impact banks, cloud providers, governments

guest Guest

Useful Searches