CVE-2024-45678

🗓️ 03 Sep 2024 20:15:08Reported by [email protected]Type

nvd🔗 web.nvd.nist.gov👁 57 Views

Yubico YubiKey 5 Series and YubiHSM 2 devices firmware vulnerabilit

Reporter	Title	Published	Views	Family All 12
IBM Security Bulletins	Security Bulletin: A Security Vulnerability was discovered in IBM Security Verify Access (CVE-2024-45678)	28 Jan 202522:08	–	ibm
Circl	CVE-2024-45678	3 Sep 202423:19	–	circl
CNNVD	Yubico YubiKey 5 安全漏洞	3 Sep 202400:00	–	cnnvd
CVE	CVE-2024-45678	3 Sep 202400:00	–	cve
Cvelist	CVE-2024-45678	3 Sep 202400:00	–	cvelist
EUVD	EUVD-2024-41550	3 Oct 202520:07	–	euvd
OSV	CVE-2024-45678	3 Sep 202420:15	–	osv
Positive Technologies	PT-2024-31724	3 Sep 202400:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2024-45678: Observable Discrepancy	3 Sep 202400:00	–	rapid7
RedhatCVE	CVE-2024-45678	23 May 202510:31	–	redhatcve

NVD

Node

AND

yubico yubikey_5c_nfc_firmwareRange<5.7

yubico yubikey_5c_nfcMatch-

Node

AND

yubico yubikey_5_nfc_firmwareRange<5.7

yubico yubikey_5_nfcMatch-

Node

AND

yubico yubikey_5c_firmwareRange<5.7

yubico yubikey_5cMatch-

Node

AND

yubico yubikey_5_nano_firmwareRange<5.7

yubico yubikey_5_nanoMatch-

Node

AND

yubico yubikey_5c_nano_firmwareRange<5.7

yubico yubikey_5c_nanoMatch-

Node

AND

yubico yubikey_5ci_firmwareRange<5.7

yubico yubikey_5ciMatch-

Node

AND

yubico yubikey_5_nfc_fips_firmwareRange<5.7

yubico yubikey_5_nfc_fipsMatch-

Node

AND

yubico yubikey_5c_nfc_fips_firmwareRange<5.7

yubico yubikey_5c_nfc_fipsMatch-

Node

AND

yubico yubikey_5c_fips_firmwareRange<5.7

yubico yubikey_5c_fipsMatch-

Node

AND

yubico yubikey_5_nano_fips_firmwareRange<5.7

yubico yubikey_5_nano_fipsMatch-

Node

AND

yubico yubikey_5c_nano_fips_firmwareRange<5.7

yubico yubikey_5c_nano_fipsMatch-

Node

AND

yubico yubikey_5ci_fips_firmwareRange<5.7

yubico yubikey_5ci_fipsMatch-

Node

AND

yubico yubikey_c_bio_firmwareRange<5.7.2fido

yubico yubikey_c_bioMatch-fido

Node

AND

yubico yubikey_bio_firmwareRange<5.7.2fido

yubico yubikey_bioMatch-fido

Node

AND

yubico security_key_nfc_by_yubico_firmwareRange<5.7

yubico security_key_nfc_by_yubicoMatch-

Node

AND

yubico security_key_c_nfc_by_yubico_firmwareRange<5.7

yubico security_key_c_nfc_by_yubicoMatch-

Node

AND

yubico yubihsm_2_fips_firmwareRange<2.4.0

yubico yubihsm_2_fipsMatch2.2

Node

AND

yubico yubihsm_2_firmwareRange<2.4.0

yubico yubihsm_2Match2.3.2

Source	Link
arstechnica	www.arstechnica.com/security/2024/09/yubikeys-are-vulnerable-to-cloning-attacks-thanks-to-newly-discovered-side-channel/
ninjalab	www.ninjalab.io/wp-content/uploads/2024/09/20240903_eucleak.pdf
ninjalab	www.ninjalab.io/eucleak/
support	www.support.yubico.com/hc/en-us/articles/15705749884444
yubico	www.yubico.com/support/security-advisories/ysa-2024-03/
news	www.news.ycombinator.com/item

17 Jun 2026 07:54Current

CVSS 3.14.2

EPSS0.00327

SSVC

yubico yubikey yubihsm firmware before 5.7.0 firmware before 2.4.0 ecdsa secret-key extraction physical access expensive equipment electromagnetic side channel non-constant-time modular inversion extended euclidean algorithm eucleak issue infineon cryptographic library vulnerability