Description
HiCOS’ client-side citizen certificate component has a double free vulnerability. An unauthenticated physical attacker can exploit this vulnerability to corrupt memory and execute arbitrary code, manipulate system data or terminate service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HINET | HiCOS’ client-side citizen digital certificate | unspecified – ≤ 11 3.0.3.30306, unspecified – ≤ 11 3.1.0.00002, unspecified – ≤ 11 3.0.3.30404 | — |