CVE-2001-1436: Dallas Semiconductor iButton DS1991 returns predictable values when given an incorrect password, which make...

Security readout for executives and security teams

CVE-2001-1436 is a legacy hardware weakness in the Dallas Semiconductor iButton DS1991. When a wrong password is presented, the device returns predictable values, making password guessing easier for someone with physical access. Business risk depends on whether these devices still protect access, credentials, or operational workflows. Exposure is most likely in legacy environments still using Dallas Semiconductor iButton DS1991 devices for authentication, access control, or embedded operational processes. The source bundle does not identify broader products or versions. Prioritize this if DS1991 devices still gate physical access, privileged operations, or regulated workflows. Otherwise, treat it as a legacy exposure to verify during hardware and access-control inventory review. Mitigation focus: Inventory DS1991 devices and their business function.; Check vendor, CERT, and asset-owner guidance before assuming a patch exists.; Restrict physical access to any deployed DS1991 tokens or readers..

Prepared

Jun 29, 2026, 22:30 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.