Debian Security Advisory 1627-1 – Chaskiel M Grundman discovered that opensc, a library and utilities to handle smart cards, would initialise smart cards with the Siemens CardOS M4 card operating system without proper access rights. This allowed everyone to change the card’s PIN.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/68794/dsa-1627-1.txt
Source: https://packetstormsecurity.com/files/68794/Debian-Linux-Security-Advisory-1627-1.html