CVE Feed

    Dashboard / CVE / CVE-2024-45678

    CVE-2024-45678

    Yubico YubiKey 5 Series devices with firmware before 5.7.0 and YubiHSM 2 devices with firmware before 2.4.0 allow an ECDSA secret-key extraction attack (that requires physical access and expensive equipment) in which an electromagnetic side channel is present because of a non-constant-time modular inversion for the Extended Euclidean Algorithm, aka the EUCLEAK issue. Other uses of an Infineon cryptographic library may also be affected.

    Published:Sep 3, 2024
    Last Modified:Mar 17, 2025
    EPS:Sep 3, 2024
    EPSS Score:0.00034
    CVSS Score:4.2

    Affected Products

    Vendor
    Yubico
    Product
    Security Key C Nfc By Yubico
    Vendor
    Yubico
    Product
    Security Key C Nfc By Yubico Firmware
    Vendor
    Yubico
    Product
    Security Key Nfc By Yubico
    Vendor
    Yubico
    Product
    Security Key Nfc By Yubico Firmware
    Vendor
    Yubico
    Product
    Yubihsm 2
    Vendor
    Yubico
    Product
    Yubihsm 2 Fips
    Vendor
    Yubico
    Product
    Yubihsm 2 Fips Firmware
    Vendor
    Yubico
    Product
    Yubihsm 2 Firmware
    Vendor
    Yubico
    Product
    Yubikey 5 Nano
    Vendor
    Yubico
    Product
    Yubikey 5 Nano Fips
    Vendor
    Yubico
    Product
    Yubikey 5 Nano Fips Firmware
    Vendor
    Yubico
    Product
    Yubikey 5 Nano Firmware
    Vendor
    Yubico
    Product
    Yubikey 5 Nfc
    Vendor
    Yubico
    Product
    Yubikey 5 Nfc Fips
    Vendor
    Yubico
    Product
    Yubikey 5 Nfc Fips Firmware
    Vendor
    Yubico
    Product
    Yubikey 5 Nfc Firmware
    Vendor
    Yubico
    Product
    Yubikey 5c
    Vendor
    Yubico
    Product
    Yubikey 5c Fips
    Vendor
    Yubico
    Product
    Yubikey 5c Fips Firmware
    Vendor
    Yubico
    Product
    Yubikey 5c Firmware
    Vendor
    Yubico
    Product
    Yubikey 5c Nano
    Vendor
    Yubico
    Product
    Yubikey 5c Nano Fips
    Vendor
    Yubico
    Product
    Yubikey 5c Nano Fips Firmware
    Vendor
    Yubico
    Product
    Yubikey 5c Nano Firmware
    Vendor
    Yubico
    Product
    Yubikey 5c Nfc
    Vendor
    Yubico
    Product
    Yubikey 5c Nfc Fips
    Vendor
    Yubico
    Product
    Yubikey 5c Nfc Fips Firmware
    Vendor
    Yubico
    Product
    Yubikey 5c Nfc Firmware
    Vendor
    Yubico
    Product
    Yubikey 5ci
    Vendor
    Yubico
    Product
    Yubikey 5ci Fips
    Vendor
    Yubico
    Product
    Yubikey 5ci Fips Firmware
    Vendor
    Yubico
    Product
    Yubikey 5ci Firmware
    Vendor
    Yubico
    Product
    Yubikey Bio
    Vendor
    Yubico
    Product
    Yubikey Bio Firmware
    Vendor
    Yubico
    Product
    Yubikey C Bio
    Vendor
    Yubico
    Product
    Yubikey C Bio Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-203 Observable Discrepancy

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-189 Black Box Reverse Engineering

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High