Categories: Ad Guardian PlusNews

Vulnerabilities in the Europe’s Digital Identity System, patched

European authorities released a patch for the eIDAS system. The electronic Identification, ONEhandedness and trust Services is the official software package that government organizations run on servers to support eIDAS-friendly transactions. The system was created to conduct cross-border electronic transactions that can be verified against official databases in any country.

Last week, SEC Consult security researchers found two vulnerabilities that could allow attackers to pretend to be any EU citizens or businesses. The released patch makes two security flaws that may allow an attacker to pose any EU citizen or business during official transactions. The cryptographically secure electronic system was created in 2014 for managing electronic transactions and digital signatures between EU Member States, citizens and businesses.

As it has a critical role, any vulnerability can allow attackers to interfere with the EU official transactions (tax payments, bank transfers etc.). Researchers discovered that the current versions of the eIDAS-Node package could not validate certificates used in eIDAS operations. Thus, the attackers could forge the certificate from any other eIDAS citizen or company.

In a potential attack, one has to only initiate a malicious connection to an eIDA-Node server in any Member State and provide forged certificates during the approval process.

“We do not have detailed information about the configuration or additional security measures for the installed production systems. We are therefore unable to provide information on the Member State concerned to what degree,” mentioned Wolfgang Ettlinger, SEC Consult Senior Security Consultant, for ZDNet.

Although the representatives of the European Commission’s CONNECT department declined to comment the incident publicly, a patch was released, together with a reminder to national administrators to get patching.

Laurentiu Titei

Recent Posts

Fixed: “Your Device is Missing Important Security and Quality Fixes” Error

Are you worried about malware infections, system instability, performance issues, and failure to run new…

3 hours ago

Download Driver Canon iP2770 and Install on Windows 11/10

Despite being discontinued, the Canon iP2770 is still a user favorite energy-efficient inkjet printer with…

1 day ago

Fix the Ubotie Keyboard Not Working Problem with Easy Steps

Ubotie is a renowned electronics brand. It offers a range of computer peripheral devices, including…

1 day ago

Epson LX 310 Driver Download and Update on Windows 11/10

Epson LX 310 is a dot matrix printing machine offering the best-in-class print quality. While…

2 days ago

Roxio Video Capture USB Driver Download with Easy Steps

Is Windows unable to recognize your Roxio Video Capture USB device? Then, it may be…

2 days ago

Download Kyocera Printer Driver Easily for Windows 11/10

Kyocera is a renowned printer brand for its reliability, high-quality printing in large volumes, and…

2 days ago