CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.6. It may lead to a denial-of-service condition.
CVE
CVE-2025-15645
Severity
MEDIUM
CVSS
4.6
EPSS
0.21%
Original NVD Description
Ledger Nano X, Flex, and Stax devices contain a denial of service vulnerability in the MCU firmware update process due to missing validation of the reset_handler parameter during firmware flashing. An attacker can provide a crafted reset_handler address pointing to invalid memory or attacker-controlled code to cause the device to enter an unrecoverable fault state during boot, resulting in permanent loss of operability.