Yubikey 5C Fips Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:yubico:yubikey_5c_fips_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Yubico (f47f12e0-b4db-5ed2-80cf-70347f747b11) |
|---|---|
| Product | Yubikey 5C Fips Firmware (e7f74bbd-96ba-586f-a1e4-7095f07e7a88) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-45678 |
vulnerable | 2026-06-03 14:56:58.486602 |
Details available
Yubico YubiKey 5 Series devices with firmware before 5.7.0 and YubiHSM 2 devices with firmware before 2.4.0 allow an ECDSA secret-key extraction attack (that requires physical access and expensive equipment) in which an electromagnetic side channel is present because of a non-constant-time modular inversion for the Extended Euclidean Algorithm, aka the EUCLEAK issue. Other uses of an Infineon cryptographic library may also be affected.
Published: 2024-09-03T00:00:00.000Z
Updated: 2025-03-17T17:51:54.621Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.