Vulnerabilities > CVE-2023-49292 - Unspecified vulnerability in Ecies GO

047910
CVSS 4.8 - MEDIUM
Attack vector
NETWORK
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
network
high complexity
ecies
NVD
Published: 2023-12-05
Updated: 2024-11-21

Summary

ecies is an Elliptic Curve Integrated Encryption Scheme for secp256k1 in Golang. If funcations Encapsulate(), Decapsulate() and ECDH() could be called by an attacker, they could recover any private key that interacts with it. This vulnerability was patched in 2.0.8. Users are advised to upgrade.

Vulnerable Configurations

Part Description Count
Application
Ecies
11

References