LFDT-Lockness vulnerabilities
We track 2 vulnerabilities in LFDT-Lockness products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 25, 2025.
2vulnerabilities
1critical
1high
0exploited
8.8average CVSS score
Latest LFDT-Lockness vulnerabilities
- 8.2 High severity
cggmp21: Use of a Broken or Risky Cryptographic Algorithm
CGGMP24 is a state-of-art ECDSA TSS protocol that supports 1-round signing (requires 3 preprocessing rounds), identifiable abort, and a key refresh protocol. In versions 0.6.3 and prior of cggmp21 and version 0.7.0-alpha.1 of cggmp24, presignatures can be used
- 9.3 Critical severity
cggmp21: Insufficient Verification of Data Authenticity
CGGMP24 is a state-of-art ECDSA TSS protocol that supports 1-round signing (requires 3 preprocessing rounds), identifiable abort, and a key refresh protocol. Prior to version 0.6.3, there is a missing check in the ZK proof that enables an attack in which singl