CVE-2020-6861 PoC — Ledger SAS Ledger Monero app 信息泄露漏洞

Source

https://github.com/ph4r05/ledger-app-monero-1.42-vuln

Associated Vulnerability

Title: Ledger SAS Ledger Monero app 信息泄露漏洞 (CVE-2020-6861)
Description:A flawed protocol design in the Ledger Monero app before 1.5.1 for Ledger Nano and Ledger S devices allows a local attacker to extract the master spending key by sending crafted messages to this app selected on a PIN-entered Ledger connected to a host PC.

Description

PoC repository for CVE-2020-6861: Ledger Monero App Spend key Extraction

Readme

# CVE-2020-6861: Ledger Monero App Spend key Extraction

PoC repository for article:

[https://deadcode.me/blog/2020/04/25/Ledger-Monero-app-spend-key-extraction.html](https://deadcode.me/blog/2020/04/25/Ledger-Monero-app-spend-key-extraction.html)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →