CVE-2001-1436: Dallas Semiconductor Ibutton

Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days.

Dallas Semiconductor iButton DS1991 returns predictable values when given an incorrect password, which makes it easier for users with physical access to conduct dictionary attacks against the device password.

Affected products

• Dallas Semiconductor Ibutton: version ds1991 only

Published 2001-01-18. Last modified 2026-06-16.