CVE-2001-0903 Weak cryptography in n/a
Remote attackers can decrypt protected content and bypass device restrictions by exploiting weak key exchange in HDCP systems.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2001-0903?
CVE-2001-0903 is a high-severity vulnerability in n/a, published on 2 Feb 2002. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Linear key exchange process in High-bandwidth Digital Content Protection (HDCP) System allows remote attackers to access data as plaintext, avoid device blacklists, clone devices, and create new device keyvectors by computing and using alternate key combinations for authentication.
Which versions are affected by CVE-2001-0903?
It affects 1 product.
Products include Intel High-Bandwidth Digital Content Protection.
How do I fix CVE-2001-0903?
No fix has been published for CVE-2001-0903 yet. Limit exposure of the affected software until one is available.
Is CVE-2001-0903 being exploited?
There is no known exploitation of CVE-2001-0903 in the wild and no public exploit code.
Sources
Also known as GHSA-fq26-6fgj-qwjw.