Yubico

Records30All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high14CVSS 7.0–8.9

Exploited now

Yubico records in CISA KEV

No Yubico vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Yubihsm-shell 4 records LOW Pam-u2f 3 records LOW Yubikey 5 Nfc Firmware 3 records LOW Libu2f-host 2 records LOW Libykpiv 2 records LOW Piv Manager 2 records LOW Piv Tool 2 records LOW Piv Tool Manager 2 records LOW

Records

3 records in Yubikey 5 Nfc Firmware · all components

TI-2020-11792 CVE-2020-15000 · GHSA-cg49-hhrx-hw69

A PIN management problem was discovered on Yubico YubiKey 5 devices 5.2.0 to 5.2.6.

LOW 28

A PIN management problem was discovered on Yubico YubiKey 5 devices 5.2.0 to 5.2.6.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00703 Published 2020-07-09 No fix listed

TI-2020-11793 CVE-2020-15001 · GHSA-9wfp-32vx-wv8g

An information leak was discovered on Yubico YubiKey 5 NFC devices 5.0.0 to 5.2.6 and…

LOW 25

An information leak was discovered on Yubico YubiKey 5 NFC devices 5.0.0 to 5.2.6 and 5.3.0 to 5.3.1.

CVSS 3.1MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00551 Published 2020-07-09 No fix listed CWE-862

TI-2024-30675 CVE-2024-45678 · GHSA-cf4q-v7mm-g53q

Yubico YubiKey 5 Series devices with firmware before 5.7.0 and YubiHSM 2 devices with…

LOW 20

Yubico YubiKey 5 Series devices with firmware before 5.7.0 and YubiHSM 2 devices with firmware before 2.4.0 allow an ECDSA secret-key extraction attack (that requires physical access and expensive equipment) in which an…

CVSS 3.1MEDIUM 4.2 Physical No auth No interaction EPSS 0.00327 Published 2024-09-03 No fix listed CWE-203

Open these records in search →

Critical	1
High	14
Medium	13
Low	2
No CVSS	0