Vulnerabilities

TI-2025-18870 CVE-2025-25201

Improper Validation of Admin Key in PIV Smartcard

LOW 18

Nitrokey 3 Firmware is the the firmware of Nitrokey 3 USB keys.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00141 Published 2025-02-12 No fix listed CWE-287

TI-2020-16537 CVE-2020-27208 · GHSA-m4fc-4f5m-5hhw

The flash read-out protection (RDP) level is not enforced during the device…

LOW 30

The flash read-out protection (RDP) level is not enforced during the device initialization phase of the SoloKeys Solo 4.0.0 & Somu and the Nitrokey FIDO2 token.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00328 Published 2021-05-21 No fix listed CWE-326

TI-2020-09715 CVE-2020-12061 · GHSA-8743-v63g-3f38

An issue was discovered in Nitrokey FIDO U2F firmware through 1.1.

MEDIUM 46

An issue was discovered in Nitrokey FIDO U2F firmware through 1.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01853 Published 2021-05-21 No fix listed CWE-522

Vulnerabilities

Filters

Improper Validation of Admin Key in PIV Smartcard

The flash read-out protection (RDP) level is not enforced during the device…

An issue was discovered in Nitrokey FIDO U2F firmware through 1.1.