Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-69893

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Trezor One等都是捷克共和国Trezor公司的产品。Trezor One是一款数字货币钱包设备。Trezor T是一款硬件加密货币钱包设备。Trezor Safe是一款硬件加密货币钱包设备。 Trezor多款产品存在安全漏洞，该漏洞源于BIP-39助记词处理实现存在侧信道漏洞，可能导致在初始设置阶段具有物理访问权限的攻击者通过基于深度学习的侧信道分析恢复助记词并窃取资产。以下产品及版本受到影响：Trezor One v1.13.0至v1.14.0版本、Trezor T v1.13.0至v1.14.

AI Predicted 4.2 Difficulty: Hard EPSS 0.24% · P14

Possible ATT&CK Techniques 1 AI

T1614 · System Location Discovery

Affected Version Matrix 1

VendorProduct Version RangeStatus
n/a n/a n/a affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-69893

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A side-channel vulnerability exists in the implementation of BIP-39 mnemonic processing, as observed in Trezor One v1.13.0 to v1.14.0, Trezor T v1.13.0 to v1.14.0, and Trezor Safe v1.13.0 to v1.14.0 hardware wallets. This originates from the BIP-39 standard guidelines, which induce non-constant time execution and specific branch patterns for word searching. An attacker with physical access during the initial setup phase can collect a single side-channel trace. By utilizing profiling-based Deep Learning Side-Channel Analysis (DL-SCA), the attacker can recover the mnemonic code and subsequently steal the assets. The issue was patched.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Trezor多款产品 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Trezor One等都是捷克共和国Trezor公司的产品。Trezor One是一款数字货币钱包设备。Trezor T是一款硬件加密货币钱包设备。Trezor Safe是一款硬件加密货币钱包设备。 Trezor多款产品存在安全漏洞，该漏洞源于BIP-39助记词处理实现存在侧信道漏洞，可能导致在初始设置阶段具有物理访问权限的攻击者通过基于深度学习的侧信道分析恢复助记词并窃取资产。以下产品及版本受到影响：Trezor One v1.13.0至v1.14.0版本、Trezor T v1.13.0至v1.14.
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2025-69893

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-69893

请登录查看更多情报信息。

Same Patch Batch · n/a · 2026-04-14 · 32 CVEs total

CVE-2026-38526 9.9 CRITICAL Webkul Krayin CRM 安全漏洞
CVE-2025-65135 9.8 CRITICAL school-management-system 安全漏洞
CVE-2025-63939 9.8 CRITICAL school-management-system 安全漏洞
CVE-2026-38529 8.8 HIGH Webkul Krayin CRM 安全漏洞
CVE-2026-38527 8.5 HIGH Webkul Krayin CRM 安全漏洞
CVE-2026-38532 8.1 HIGH Webkul Krayin CRM 安全漏洞
CVE-2026-38530 8.1 HIGH Webkul Krayin CRM 安全漏洞
CVE-2026-38528 7.1 HIGH Webkul Krayin CRM 安全漏洞
CVE-2025-69993 6.1 MEDIUM Leaflet 安全漏洞
CVE-2025-65132 Hotel management system using php and mysql. 安全漏洞
CVE-2026-37594 SourceCodester Online Employees Work From Home Attendance System 安全漏洞
CVE-2026-31049 Hostbill 安全漏洞
CVE-2026-30480 LibreNMS 安全漏洞
CVE-2025-70023 Uppy 安全漏洞
CVE-2025-61260 OpenAI Codex CLI 安全漏洞
CVE-2025-65133 School-Management-System 安全漏洞
CVE-2026-37601 SourceCodester Patient Appointment Scheduler 安全漏洞
CVE-2025-65136 school-management-system 安全漏洞
CVE-2025-65134 School-Management-System 安全漏洞
CVE-2026-37590 SourceCodester Storage Unit Rental Management System 安全漏洞

Showing top 20 of 32 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2025-69893

No comments yet

Leave a comment