CVE:CVE-2023-25758
CNNVD:CNNVD-202302-1029
Onekey Touch devices是Onekey公司的一个一键触摸设备。
Onekey Touch devices 4.0.0之前版本、Onekey Mini devices 2.10.0之前版本存在安全漏洞。攻击者利用该漏洞执行中间人攻击。
solution:Upgrade onekey onekey_touch_firmware to a higher version than 4.0.0,and avoid the version (,4.0.0]; Upgrade onekey onekey_mini_firmware to a higher version than 2.10.0,and avoid the version (,2.10.0]