VULNERABILITY INTELLIGENCE
CVE-2008-3972
CVSS score6.6 MEDIUM
EPSS probability0.37%
CISA KEVNot currently listed
Published2008-09-11
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:N/I:C/A:C
Description
pkcs15-tool in OpenSC before 0.11.6 does not apply security updates to a smart card unless the card's label matches the "OpenSC" string, which might allow physically proximate attackers to exploit vulnerabilities that the card owner expected were patched, as demonstrated by exploitation of CVE-2008-2235.