{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-23T12:43:09.184","vulnerabilities":[{"cve":{"id":"CVE-2024-45678","sourceIdentifier":"cve@mitre.org","published":"2024-09-03T20:15:08.860","lastModified":"2026-06-17T07:54:39.063","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Yubico YubiKey 5 Series devices with firmware before 5.7.0 and YubiHSM 2 devices with firmware before 2.4.0 allow an ECDSA secret-key extraction attack (that requires physical access and expensive equipment) in which an electromagnetic side channel is present because of a non-constant-time modular inversion for the Extended Euclidean Algorithm, aka the EUCLEAK issue. Other uses of an Infineon cryptographic library may also be affected."},{"lang":"es","value":"Los dispositivos Yubico YubiKey 5 Series con firmware anterior a la versión 5.7.0 y los dispositivos YubiHSM 2 con firmware anterior a la versión 2.4.0 permiten un ataque de extracción de clave secreta ECDSA (que requiere acceso físico y equipo costoso) en el que está presente un canal lateral electromagnético debido a una inversión modular de tiempo no constante para el algoritmo euclidiano extendido, también conocido como el problema EUCLEAK. También pueden verse afectados otros usos de una librería criptográfica de Infineon."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":4.2,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.5,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":4.2,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.5,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-03T20:05:11.700572Z","id":"CVE-2024-45678","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-203"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-203"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:yubico:yubikey_5c_nfc_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"5.7","matchCriteriaId":"3A3AD0E6-0574-47EE-9FBB-334CE68DDC21"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:yubico:yubikey_5c_nfc:-:*:*:*:*:*:*:*","matchCriteriaId":"07C25D85-7064-40AE-8367-E0177ABF34BA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:yubico:yubikey_5_nfc_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"5.7","matchCriteriaId":"579B4B53-42E6-49F4-8B6A-CEF20F4FB273"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:yubico:yubikey_5_nfc:-:*:*:*:*:*:*:*","matchCriteriaId":"D1A090DE-CB10-4B10-AAED-8FD0FF8587EC"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:yubico:yubikey_5c_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"5.7","matchCriteriaId":"105FC95D-FFF9-4B62-A3C8-885CA849594F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:yubico:yubikey_5c:-:*:*:*:*:*:*:*","matchCriteriaId":"40D171D5-5D3B-466C-B94A-2918B366FBBA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:yubico:yubikey_5_nano_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"5.7","matchCriteriaId":"BF1F17EC-56C2-4D7A-A9C9-40FEF40230F0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:yubico:yubikey_5_nano:-:*:*:*:*:*:*:*","matchCriteriaId":"40CB7E26-B259-4598-A315-99BA9FAEF597"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:yubico:yubikey_5c_nano_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"5.7","matchCriteriaId":"FFCF2D75-F0AD-46EF-8FA6-584D063AB617"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:yubico:yubikey_5c_nano:-:*:*:*:*:*:*:*","matchCriteriaId":"C8FCB422-72F5-41C6-8D1C-862F89EE7BB2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:yubico:yubikey_5ci_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"5.7","matchCriteriaId":"13D52DA5-40EB-459B-89DB-8340633CE912"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:yubico:yubikey_5ci:-:*:*:*:*:*:*:*","matchCriteriaId":"9E8E34BD-9EC0-44A1-8FAF-6B03A489EE63"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:yubico:yubikey_5_nfc_fips_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"5.7","matchCriteriaId":"07334305-916C-43BF-A1EC-99555AD648E4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:yubico:yubikey_5_nfc_fips:-:*:*:*:*:*:*:*","matchCriteriaId":"431D25BC-EBE5-48EC-9CC3-7CD93C9E1AD7"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:yubico:yubikey_5c_nfc_fips_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"5.7","matchCriteriaId":"36B8E1DF-54D0-4EF5-AD7F-FE06BD40DD45"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:yubico:yubikey_5c_nfc_fips:-:*:*:*:*:*:*:*","matchCriteriaId":"4DB4CEA3-0317-40DB-89A5-017FA4934936"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:yubico:yubikey_5c_fips_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"5.7","matchCriteriaId":"2B9F6B35-DD39-47E6-9960-214A6992EB91"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:yubico:yubikey_5c_fips:-:*:*:*:*:*:*:*","matchCriteriaId":"C5986774-1168-4212-94DA-F9095800203E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:yubico:yubikey_5_nano_fips_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"5.7","matchCriteriaId":"8B2E277E-94B9-465C-8A8D-A4838B8C13E5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:yubico:yubikey_5_nano_fips:-:*:*:*:*:*:*:*","matchCriteriaId":"A805BFB3-B3C1-4CCF-A71D-87F81DC3C0DE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:yubico:yubikey_5c_nano_fips_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"5.7","matchCriteriaId":"A85128D8-4149-438B-BB18-8D1F72DE3DEB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:yubico:yubikey_5c_nano_fips:-:*:*:*:*:*:*:*","matchCriteriaId":"BB6261B0-E797-4A6F-9AB6-557E6ACFF994"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:yubico:yubikey_5ci_fips_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"5.7","matchCriteriaId":"C61C9EED-7B06-4636-A59D-444A873C1362"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:yubico:yubikey_5ci_fips:-:*:*:*:*:*:*:*","matchCriteriaId":"FC63DF4C-FF60-47FE-9495-A8566AC8B5FE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:yubico:yubikey_c_bio_firmware:*:*:*:*:fido:*:*:*","versionEndExcluding":"5.7.2","matchCriteriaId":"D605684E-D163-4492-AB15-01E867A6CD8B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:yubico:yubikey_c_bio:-:*:*:*:fido:*:*:*","matchCriteriaId":"F9898BB1-A204-432B-849A-53A662757129"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:yubico:yubikey_bio_firmware:*:*:*:*:fido:*:*:*","versionEndExcluding":"5.7.2","matchCriteriaId":"4AB8EF7A-D87A-4D22-AEB4-8911DD494BA6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:yubico:yubikey_bio:-:*:*:*:fido:*:*:*","matchCriteriaId":"9FE20969-040C-4128-B57E-EAB586404981"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:yubico:security_key_nfc_by_yubico_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"5.7","matchCriteriaId":"B027D4D5-44BB-4A43-8C45-8205B29F0ABC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:yubico:security_key_nfc_by_yubico:-:*:*:*:*:*:*:*","matchCriteriaId":"CE0AD2F8-BD3C-4FDD-BFEF-7E2620E56A5E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:yubico:security_key_c_nfc_by_yubico_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"5.7","matchCriteriaId":"DE823686-6D37-44F2-AB74-8888454E4DEB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:yubico:security_key_c_nfc_by_yubico:-:*:*:*:*:*:*:*","matchCriteriaId":"BD5C316F-E25C-49A3-9C9F-BA098D1C408C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:yubico:yubihsm_2_fips_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.0","matchCriteriaId":"5AB6A24D-F4C0-444B-BF88-9C6BCD8E3F63"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:yubico:yubihsm_2_fips:2.2:*:*:*:*:*:*:*","matchCriteriaId":"424BAB98-3166-4977-BBF4-50B412BBB1F6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:yubico:yubihsm_2_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.0","matchCriteriaId":"3FF84FB6-7A33-4C1A-9212-17F84C61DA85"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:yubico:yubihsm_2:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"E2D1D146-4B00-4920-AC77-893AF88E249D"}]}]}],"references":[{"url":"https://arstechnica.com/security/2024/09/yubikeys-are-vulnerable-to-cloning-attacks-thanks-to-newly-discovered-side-channel/","source":"cve@mitre.org","tags":["Press/Media Coverage"]},{"url":"https://news.ycombinator.com/item?id=41434500","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://ninjalab.io/eucleak/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://ninjalab.io/wp-content/uploads/2024/09/20240903_eucleak.pdf","source":"cve@mitre.org","tags":["Technical Description"]},{"url":"https://support.yubico.com/hc/en-us/articles/15705749884444","source":"cve@mitre.org","tags":["Mitigation","Third Party Advisory"]},{"url":"https://www.yubico.com/support/security-advisories/ysa-2024-03/","source":"cve@mitre.org","tags":["Vendor Advisory"]}]}}]}