← Database

CVE-2024-45678

MEDIUM CVSS: 4.2 Published: 2024-09-03 Modified: 2026-06-17

Description

Yubico YubiKey 5 Series devices with firmware before 5.7.0 and YubiHSM 2 devices with firmware before 2.4.0 allow an ECDSA secret-key extraction attack (that requires physical access and expensive equipment) in which an electromagnetic side channel is present because of a non-constant-time modular inversion for the Extended Euclidean Algorithm, aka the EUCLEAK issue. Other uses of an Infineon cryptographic library may also be affected.

Affected Platforms

Yubico Yubikey 5CYubico Yubikey 5Ci FipsYubico Yubikey 5Ci FirmwareYubico Security Key C Nfc By Yubico FirmwareYubico Yubikey 5 Nano FipsYubico Yubikey 5CiYubico Yubikey 5Ci Fips FirmwareYubico Yubikey 5C Nfc FirmwareYubico Security Key Nfc By YubicoYubico Yubihsm 2

Weakness Type

CWE-203, CWE-203

References