VULNERABILITY INTELLIGENCE

CVE-2018-6875

CVSS score7.5 HIGH
EPSS probability1.09%
CISA KEVNot currently listed
Published2018-03-14
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

Format String vulnerability in KeepKey version 4.0.0 allows attackers to trigger information display (of information that should not be accessible), related to text containing characters that the device's font lacks.

Weakness classification

  • CWE-134: Use of Externally-Controlled Format String

Primary references