What’s Vulnerable › Vulnerabilities

CVE-2001-1436

• Severity: medium (CVSS 4.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2001-01-18 · updated 2026-06-16

Description

Dallas Semiconductor iButton DS1991 returns predictable values when given an incorrect password, which makes it easier for users with physical access to conduct dictionary attacks against the device password.

Affected products

• Dallas Semiconductor Ibutton: ds1991

References

• http://www.atstake.com/research/advisories/2001/a011801-1.txt
• http://www.kb.cert.org/vuls/id/178560
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10625
• http://www.atstake.com/research/advisories/2001/a011801-1.txt
• http://www.kb.cert.org/vuls/id/178560
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10625

Get alerted when CVE-2001-1436 or the next vulnerability affects your stack