GCVE-110-CERTCC-2012-659615

Advisory PublishedCVSS 4.0/10

Vulnetix · Advisory published November 9, 2012

A flaw has been identified in Oberthur ID-One COSMO 64, v5.2 and v5.2a smart cards, which results in public keys that do not satisfy the requirements of the Digital Signature Standard (as specified in FIPS PUB 186-3 and its predecessors).

Download JSON Open in Console

Risk Scores

CVSS 2.0

4.0/10

Medium · AV:L/AC:H/Au:N/C:N/I:C/A:N

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact2d1_population2d1_direct_report1

certcc-cvss-temporal-env

temporal_score3.1remediation_levelOFreport_confidenceCenvironmental_score2.3target_distributionMenvironmental_vectorCDP:ND/TD:M/CR:ND/IR:ND/AR:ND

References

Oberthur smart cards generate weak certificates

url

Oberthur smart cards generate weak certificates

url

Oberthur smart cards generate weak certificates

advisory

Browse GCVE Records

73,196 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON