Nitrokey FIDO2 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:nitrokey:fido2_firmware:-:*:*:*:*:*:*:*
part: o version: - update: *
| Vendor | Nitrokey (3c94ccbc-3ec7-5165-beeb-9d55af924077) |
|---|---|
| Product | Fido2 Firmware (7cf9712c-c135-5ce7-9794-71691f9ada93) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/nitrokey/nitrokey-fido2-firmware |
purl2cpe | 2026-06-01 10:12:26.477572 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-27208 |
vulnerable | 2026-06-08 05:23:52.241888 |
Details available
The flash read-out protection (RDP) level is not enforced during the device initialization phase of the SoloKeys Solo 4.0.0 & Somu and the Nitrokey FIDO2 token. This allows an adversary to downgrade the RDP level and access secrets such as private ECC keys from SRAM via the debug interface.
Published: 2021-05-21T11:17:50.000Z
Updated: 2024-08-04T16:11:35.926Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.