CVE-2023-31290

Trust Wallet Core before 3.1.1, as used in the Trust Wallet browser extension before 0.0.183, allows theft of funds because the entropy is 32 bits, as exploited in the wild in December 2022 and March 2023. This occurs because the mt19937 Mersenne Twister takes a single 32-bit value as an input seed, resulting in only four billion possible mnemonics. The affected versions of the browser extension are 0.0.172 through 0.0.182. To steal funds efficiently, an attacker can identify all Ethereum addresses created since the 0.0.172 release, and check whether they are Ethereum addresses that could have been created by this extension. To respond to the risk, affected users need to upgrade the product version and also move funds to a new wallet address.

CVSS v3 5.9 MEDIUM

5.9^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://blog.ledger.com/Funds-of-every-wallet-created-with-the-Trust-Wallet-browser-extension-could-have-been-stolen/	Exploit Third Party Advisory
https://community.trustwallet.com/t/browser-extension-wasm-vulnerability-postmortem/750787	Vendor Advisory
https://community.trustwallet.com/t/wasm-vulnerability-incident-update-and-recommended-actions/750786	Vendor Advisory
https://github.com/trustwallet/wallet-core/compare/3.1.0...3.1.1	Patch
https://twitter.com/TrustWallet/status/1649699428733947906	Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:trustwallet:trust_wallet_browser_extension::::::::
	cpe:2.3:a:trustwallet:trust_wallet_core::::::::

History

No history.

Information

Published : 2023-04-27 05:15

Updated : 2024-02-28 20:13

NVD link : CVE-2023-31290

Mitre link : CVE-2023-31290

CVE.ORG link : CVE-2023-31290

JSON object : View

Products Affected

trustwallet

trust_wallet_browser_extension
trust_wallet_core

CWE

CWE-338

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

{"id": "CVE-2023-31290", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.2}]}, "published": "2023-04-27T05:15:08.807", "references": [{"url": "https://blog.ledger.com/Funds-of-every-wallet-created-with-the-Trust-Wallet-browser-extension-could-have-been-stolen/", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://community.trustwallet.com/t/browser-extension-wasm-vulnerability-postmortem/750787", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://community.trustwallet.com/t/wasm-vulnerability-incident-update-and-recommended-actions/750786", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/trustwallet/wallet-core/compare/3.1.0...3.1.1", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "https://twitter.com/TrustWallet/status/1649699428733947906", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-338"}]}], "descriptions": [{"lang": "en", "value": "Trust Wallet Core before 3.1.1, as used in the Trust Wallet browser extension before 0.0.183, allows theft of funds because the entropy is 32 bits, as exploited in the wild in December 2022 and March 2023. This occurs because the mt19937 Mersenne Twister takes a single 32-bit value as an input seed, resulting in only four billion possible mnemonics. The affected versions of the browser extension are 0.0.172 through 0.0.182. To steal funds efficiently, an attacker can identify all Ethereum addresses created since the 0.0.172 release, and check whether they are Ethereum addresses that could have been created by this extension. To respond to the risk, affected users need to upgrade the product version and also move funds to a new wallet address."}], "lastModified": "2023-05-10T15:27:15.117", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:trustwallet:trust_wallet_browser_extension:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "049986E2-FFFC-4688-9454-5656A8CECF3F", "versionEndExcluding": "0.0.183", "versionStartIncluding": "0.0.172"}, {"criteria": "cpe:2.3:a:trustwallet:trust_wallet_core:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "049748BF-4169-4FE2-81DA-4954CC4AC5A8", "versionEndExcluding": "3.1.1"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}