CVE:CVE-2019-14356
CNNVD:CNNVD-201910-1904
Coinkite Coldcard MK1和Coldcard MK2都是Coinkite公司的一款基于硬件的比特币钱包设备。
Coinkite Coldcard MK1和Coldcard MK2中存在信息泄露漏洞。攻击者可利用该漏洞恢复敏感数据，例如PIN和BIP39助记符。
solution:Upgrade coinkite coldcard_mk1_firmware to a higher version than 2.1.2,and avoid the version (,2.1.2); Upgrade coinkite coldcard_mk2_firmware to a higher version than 2.1.2,and avoid the version (,2.1.2)