Security Advisory

CVE-2024-45678

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-09-03 00:00:00

Last updated 2025-03-17 17:51:54

Assigner mitre

State PUBLISHED

Description

Yubico YubiKey 5 Series devices with firmware before 5.7.0 and YubiHSM 2 devices with firmware before 2.4.0 allow an ECDSA secret-key extraction attack (that requires physical access and expensive equipment) in which an electromagnetic side channel is present because of a non-constant-time modular inversion for the Extended Euclidean Algorithm, aka the EUCLEAK issue. Other uses of an Infineon cryptographic library may also be affected.

← Browse all CVEs View on cve.org ↗