Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
2 vulnerabilities found for fido2_firmware by nitrokey
CVE-2020-27208 (GCVE-0-2020-27208)
Vulnerability from cvelistv5 – Published: 2021-05-21 11:17 – Updated: 2024-08-04 16:11
VLAI
EPSS
VEX
Summary
The flash read-out protection (RDP) level is not enforced during the device initialization phase of the SoloKeys Solo 4.0.0 & Somu and the Nitrokey FIDO2 token. This allows an adversary to downgrade the RDP level and access secrets such as private ECC keys from SRAM via the debug interface.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://www.aisec.fraunhofer.de/en/FirmwareProtec… | x_refsource_MISC |
| https://twitter.com/SoloKeysSec | x_refsource_MISC |
| https://solokeys.com | x_refsource_MISC |
| https://eprint.iacr.org/2021/640 | x_refsource_MISC |
| https://github.com/solokeys/solo/commit/a9c02cd35… | x_refsource_MISC |
| https://www.aisec.fraunhofer.de/de/das-institut/w… | x_refsource_MISC |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T16:11:35.926Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.aisec.fraunhofer.de/en/FirmwareProtection.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://twitter.com/SoloKeysSec"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://solokeys.com"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://eprint.iacr.org/2021/640"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/solokeys/solo/commit/a9c02cd354f34b48195a342c7f524abdef5cbcec"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.aisec.fraunhofer.de/de/das-institut/wissenschaftliche-exzellenz/security-and-trust-in-open-source-security-tokens.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The flash read-out protection (RDP) level is not enforced during the device initialization phase of the SoloKeys Solo 4.0.0 \u0026 Somu and the Nitrokey FIDO2 token. This allows an adversary to downgrade the RDP level and access secrets such as private ECC keys from SRAM via the debug interface."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-05-26T15:04:34.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.aisec.fraunhofer.de/en/FirmwareProtection.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://twitter.com/SoloKeysSec"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://solokeys.com"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://eprint.iacr.org/2021/640"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/solokeys/solo/commit/a9c02cd354f34b48195a342c7f524abdef5cbcec"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.aisec.fraunhofer.de/de/das-institut/wissenschaftliche-exzellenz/security-and-trust-in-open-source-security-tokens.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-27208",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The flash read-out protection (RDP) level is not enforced during the device initialization phase of the SoloKeys Solo 4.0.0 \u0026 Somu and the Nitrokey FIDO2 token. This allows an adversary to downgrade the RDP level and access secrets such as private ECC keys from SRAM via the debug interface."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.aisec.fraunhofer.de/en/FirmwareProtection.html",
"refsource": "MISC",
"url": "https://www.aisec.fraunhofer.de/en/FirmwareProtection.html"
},
{
"name": "https://twitter.com/SoloKeysSec",
"refsource": "MISC",
"url": "https://twitter.com/SoloKeysSec"
},
{
"name": "https://solokeys.com",
"refsource": "MISC",
"url": "https://solokeys.com"
},
{
"name": "https://eprint.iacr.org/2021/640",
"refsource": "MISC",
"url": "https://eprint.iacr.org/2021/640"
},
{
"name": "https://github.com/solokeys/solo/commit/a9c02cd354f34b48195a342c7f524abdef5cbcec",
"refsource": "MISC",
"url": "https://github.com/solokeys/solo/commit/a9c02cd354f34b48195a342c7f524abdef5cbcec"
},
{
"name": "https://www.aisec.fraunhofer.de/de/das-institut/wissenschaftliche-exzellenz/security-and-trust-in-open-source-security-tokens.html",
"refsource": "MISC",
"url": "https://www.aisec.fraunhofer.de/de/das-institut/wissenschaftliche-exzellenz/security-and-trust-in-open-source-security-tokens.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2020-27208",
"datePublished": "2021-05-21T11:17:50.000Z",
"dateReserved": "2020-10-19T00:00:00.000Z",
"dateUpdated": "2024-08-04T16:11:35.926Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2020-27208 (GCVE-0-2020-27208)
Vulnerability from nvd – Published: 2021-05-21 11:17 – Updated: 2024-08-04 16:11
VLAI
EPSS
VEX
Summary
The flash read-out protection (RDP) level is not enforced during the device initialization phase of the SoloKeys Solo 4.0.0 & Somu and the Nitrokey FIDO2 token. This allows an adversary to downgrade the RDP level and access secrets such as private ECC keys from SRAM via the debug interface.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://www.aisec.fraunhofer.de/en/FirmwareProtec… | x_refsource_MISC |
| https://twitter.com/SoloKeysSec | x_refsource_MISC |
| https://solokeys.com | x_refsource_MISC |
| https://eprint.iacr.org/2021/640 | x_refsource_MISC |
| https://github.com/solokeys/solo/commit/a9c02cd35… | x_refsource_MISC |
| https://www.aisec.fraunhofer.de/de/das-institut/w… | x_refsource_MISC |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T16:11:35.926Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.aisec.fraunhofer.de/en/FirmwareProtection.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://twitter.com/SoloKeysSec"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://solokeys.com"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://eprint.iacr.org/2021/640"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/solokeys/solo/commit/a9c02cd354f34b48195a342c7f524abdef5cbcec"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.aisec.fraunhofer.de/de/das-institut/wissenschaftliche-exzellenz/security-and-trust-in-open-source-security-tokens.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The flash read-out protection (RDP) level is not enforced during the device initialization phase of the SoloKeys Solo 4.0.0 \u0026 Somu and the Nitrokey FIDO2 token. This allows an adversary to downgrade the RDP level and access secrets such as private ECC keys from SRAM via the debug interface."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-05-26T15:04:34.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.aisec.fraunhofer.de/en/FirmwareProtection.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://twitter.com/SoloKeysSec"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://solokeys.com"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://eprint.iacr.org/2021/640"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/solokeys/solo/commit/a9c02cd354f34b48195a342c7f524abdef5cbcec"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.aisec.fraunhofer.de/de/das-institut/wissenschaftliche-exzellenz/security-and-trust-in-open-source-security-tokens.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-27208",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The flash read-out protection (RDP) level is not enforced during the device initialization phase of the SoloKeys Solo 4.0.0 \u0026 Somu and the Nitrokey FIDO2 token. This allows an adversary to downgrade the RDP level and access secrets such as private ECC keys from SRAM via the debug interface."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.aisec.fraunhofer.de/en/FirmwareProtection.html",
"refsource": "MISC",
"url": "https://www.aisec.fraunhofer.de/en/FirmwareProtection.html"
},
{
"name": "https://twitter.com/SoloKeysSec",
"refsource": "MISC",
"url": "https://twitter.com/SoloKeysSec"
},
{
"name": "https://solokeys.com",
"refsource": "MISC",
"url": "https://solokeys.com"
},
{
"name": "https://eprint.iacr.org/2021/640",
"refsource": "MISC",
"url": "https://eprint.iacr.org/2021/640"
},
{
"name": "https://github.com/solokeys/solo/commit/a9c02cd354f34b48195a342c7f524abdef5cbcec",
"refsource": "MISC",
"url": "https://github.com/solokeys/solo/commit/a9c02cd354f34b48195a342c7f524abdef5cbcec"
},
{
"name": "https://www.aisec.fraunhofer.de/de/das-institut/wissenschaftliche-exzellenz/security-and-trust-in-open-source-security-tokens.html",
"refsource": "MISC",
"url": "https://www.aisec.fraunhofer.de/de/das-institut/wissenschaftliche-exzellenz/security-and-trust-in-open-source-security-tokens.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2020-27208",
"datePublished": "2021-05-21T11:17:50.000Z",
"dateReserved": "2020-10-19T00:00:00.000Z",
"dateUpdated": "2024-08-04T16:11:35.926Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}