CVE-2021-32033

CVE-2021-32033 affects Protectimus SLIM NFC 70 devices and firmware, allowing a "Time Traveler" attack. This vulnerability enables an unauthenticated attacker with brief physical access to manipulate the device's internal clock, generate future time-based one-time passwords (TOTPs), and then reset the clock, effectively pre-generating valid future TOTPs. Rated Medium (CVSS 4.6), the attack requires physical proximity (AV:P) but is low complexity (AC:L) and results in high confidentiality impact (C:H). There is no evidence of active exploitation, public exploit code, or significant community discussion, and it is not listed in CISA's KEV catalog.