CVE-2004-0063

CVE-2004-0063 describes a vulnerability in the nCipher payShield SPP library (versions 1.3.12, 1.5.18, and 1.6.18) where the SPP_VerifyPVV function incorrectly returns a "Status_OK" value even when the Hardware Security Module (HSM) indicates a different status. This flaw could lead applications to make critical security errors, such as accepting invalid PIN numbers. The vulnerability has a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low complexity, and potential for partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.