VYPR

Yubikey 5 Nfc Firmware

by Yubico

CVEs (3)

  • CVE-2020-15000MedJul 9, 2020
    risk 0.38cvss 5.9epss 0.01

    A PIN management problem was discovered on Yubico YubiKey 5 devices 5.2.0 to 5.2.6. OpenPGP has three passwords: Admin PIN, Reset Code, and User PIN. The Reset Code is used to reset the User PIN, but it is disabled by default. A flaw in the implementation of OpenPGP sets the…

  • CVE-2020-15001MedJul 9, 2020
    risk 0.34cvss 5.3epss 0.01

    An information leak was discovered on Yubico YubiKey 5 NFC devices 5.0.0 to 5.2.6 and 5.3.0 to 5.3.1. The OTP application allows a user to set optional access codes on OTP slots. This access code is intended to prevent unauthorized changes to OTP configurations. The access code…

  • CVE-2024-45678MedSep 3, 2024
    risk 0.27cvss 4.2epss 0.00

    Yubico YubiKey 5 Series devices with firmware before 5.7.0 and YubiHSM 2 devices with firmware before 2.4.0 allow an ECDSA secret-key extraction attack (that requires physical access and expensive equipment) in which an electromagnetic side channel is present because of a…