CVE-2024-45678

🗓️ 03 Sep 2024 00:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 90 Views

Yubico YubiKey 5 Series and YubiHSM 2 devices firmware before 5.7.0 and 2.4.0 allows ECDSA secret-key extraction attac

Reporter	Title	Published	Views	Family All 11
IBM Security Bulletins	Security Bulletin: A Security Vulnerability was discovered in IBM Security Verify Access (CVE-2024-45678)	28 Jan 202522:08	–	ibm
Circl	CVE-2024-45678	3 Sep 202423:19	–	circl
CNNVD	Yubico YubiKey 5 安全漏洞	3 Sep 202400:00	–	cnnvd
Cvelist	CVE-2024-45678	3 Sep 202400:00	–	cvelist
EUVD	EUVD-2024-41550	3 Oct 202520:07	–	euvd
NVD	CVE-2024-45678	3 Sep 202420:15	–	nvd
OSV	CVE-2024-45678	3 Sep 202420:15	–	osv
Positive Technologies	PT-2024-31724	3 Sep 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-45678	23 May 202510:31	–	redhatcve
The Hacker News	Google Chrome Switches to ML-KEM for Post-Quantum Cryptography Defense	17 Sep 202412:22	–	thn

NVD

Node

yubico yubikey_5c_nfc_firmwareRange<5.7

AND

yubico yubikey_5c_nfcMatch-

Node

yubico yubikey_5_nfc_firmwareRange<5.7

AND

yubico yubikey_5_nfcMatch-

Node

yubico yubikey_5c_firmwareRange<5.7

AND

yubico yubikey_5cMatch-

Node

yubico yubikey_5_nano_firmwareRange<5.7

AND

yubico yubikey_5_nanoMatch-

Node

yubico yubikey_5c_nano_firmwareRange<5.7

AND

yubico yubikey_5c_nanoMatch-

Node

yubico yubikey_5ci_firmwareRange<5.7

AND

yubico yubikey_5ciMatch-

Node

yubico yubikey_5_nfc_fips_firmwareRange<5.7

AND

yubico yubikey_5_nfc_fipsMatch-

Node

yubico yubikey_5c_nfc_fips_firmwareRange<5.7

AND

yubico yubikey_5c_nfc_fipsMatch-

Node

yubico yubikey_5c_fips_firmwareRange<5.7

AND

yubico yubikey_5c_fipsMatch-

Node

yubico yubikey_5_nano_fips_firmwareRange<5.7

AND

yubico yubikey_5_nano_fipsMatch-

Node

yubico yubikey_5c_nano_fips_firmwareRange<5.7

AND

yubico yubikey_5c_nano_fipsMatch-

Node

yubico yubikey_5ci_fips_firmwareRange<5.7

AND

yubico yubikey_5ci_fipsMatch-

Node

yubico yubikey_c_bio_firmwareRange<5.7.2fido

AND

yubico yubikey_c_bioMatch-fido

Node

yubico yubikey_bio_firmwareRange<5.7.2fido

AND

yubico yubikey_bioMatch-fido

Node

yubico security_key_nfc_by_yubico_firmwareRange<5.7

AND

yubico security_key_nfc_by_yubicoMatch-

Node

yubico security_key_c_nfc_by_yubico_firmwareRange<5.7

AND

yubico security_key_c_nfc_by_yubicoMatch-

Node

yubico yubihsm_2_fips_firmwareRange<2.4.0

AND

yubico yubihsm_2_fipsMatch2.2

Node

yubico yubihsm_2_firmwareRange<2.4.0

AND

yubico yubihsm_2Match2.3.2

Source	Link
ninjalab	www.ninjalab.io/eucleak/
support	www.support.yubico.com/hc/en-us/articles/15705749884444
ninjalab	www.ninjalab.io/wp-content/uploads/2024/09/20240903_eucleak.pdf
arstechnica	www.arstechnica.com/security/2024/09/yubikeys-are-vulnerable-to-cloning-attacks-thanks-to-newly-discovered-side-channel/
yubico	www.yubico.com/support/security-advisories/ysa-2024-03/
news	www.news.ycombinator.com/item

17 Mar 2025 18:15Current

7.1High risk

Vulners AI Score7.1

CVSS 3.14.2

EPSS0.00245

SSVC

yubico yubikey firmware ecdsa secret-key extraction attack yubihsm electromagnetic side channel infineon cryptographic library