CVE-2024-45678 - Yubico YubiKey 5 Series/YubiHSM 2: EUCLEAK ECDSA Secret-Key Extraction Vulnerability

CVE ID : CVE-2024-45678
Published : Sept. 3, 2024, 8:15 p.m. | 24 minutes ago
Description : Yubico YubiKey 5 Series devices with firmware before 5.7.0 and YubiHSM 2 devices with firmware before 2.4.0 allow an ECDSA secret-key extraction attack (that requires physical access and expensive equipment) in which an electromagnetic side channel is present because of a non-constant-time modular inversion for the Extended Euclidean Algorithm, aka the EUCLEAK issue. Other uses of an Infineon cryptographic library may also be affected.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...