CVE-2012-5860: Unspecified vulnerability on Oberthur ID-One COSMO 5.2, 5.2a, and 64 smart cards makes it easier for attack...

Security readout for executives and security teams

This CVE concerns Oberthur ID-One COSMO 5.2, 5.2a, and 64 smart cards generating non-compliant public keys. If an organization used these cards for certificates, authentication, signing, or encryption, the cryptographic protection may be weaker than expected. The available sources do not provide CVSS, CWE, patch details, or evidence of active exploitation. Exposure is most likely in environments that issued or still trust keys generated by Oberthur ID-One COSMO 5.2, 5.2a, or 64 smart cards. Risk depends on whether those cards generated operational keys and whether those keys remain trusted. Treat this as an inventory and trust-assurance issue. Urgency is highest where affected smart cards generated keys still used for identity, signing, or encryption. Public evidence is too limited to rate severity confidently. Mitigation focus: Inventory Oberthur ID-One COSMO smart cards and deployed versions.; Stop generating new operational keys on confirmed affected cards.; Consult CERT VU#659615 and vendor guidance for replacement or remediation direction..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.