VulnSocial

CVE-2024-45678General(yubico / security_key_c_nfc_by_yubico)

LOWCVSS 4.2 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Yubico YubiKey 5 Series devices with firmware before 5.7.0 and YubiHSM 2 devices with firmware before 2.4.0 allow an ECDSA secret-key extraction attack (that requires physical access and expensive equipment) in which an electromagnetic side channel is present because of a non-constant-time modular inversion for the Extended Euclidean Algorithm, aka the EUCLEAK issue. Other uses of an Infineon cryptographic library may also be affected.

yubico CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-203

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • security_key_c_nfc_by_yubico
  • security_key_c_nfc_by_yubico_firmware
  • security_key_nfc_by_yubico
  • security_key_nfc_by_yubico_firmware

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • General: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-04-28); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
yubico
Products
security_key_c_nfc_by_yubicosecurity_key_c_nfc_by_yubico_firmwaresecurity_key_nfc_by_yubicosecurity_key_nfc_by_yubico_firmwareyubihsm_2yubihsm_2_fipsyubihsm_2_fips_firmwareyubihsm_2_firmwareyubikey_5_nanoyubikey_5_nano_fips

3 versions affected across 36 products

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-04-28: 1Mentions · 2026-08-10: 104-2808-10
Signal classification1 categories
General
2100.0%
Full discourse2 posts
  • Vincent Yang@m1ssuo
    General

    @taresky CVE-2024-45678

    Post summary

    The post only mentions CVE-2024-45678 without providing any additional information on exploitation, patching, or technical details.

    300351.1K
    11.8K followersView on X
  • Bob@skytaleSythe
    General

    @OfcRyan79 @HardPass4 Have workbench. We can look for really fancy vulns like Yubico CVE-2024-45678

    Post summary

    The message only references a CVE ID without providing any additional details or context.

    0000070
    507 followersView on X
CPE platform detail36 entries

36 of 36 entries

PartVendorProductVersionTarget SWTarget HW
HWyubicosecurity_key_c_nfc_by_yubico---
OSyubicosecurity_key_c_nfc_by_yubico_firmware---
HWyubicosecurity_key_nfc_by_yubico---
OSyubicosecurity_key_nfc_by_yubico_firmware---
HWyubicoyubihsm_22.3.2--
HWyubicoyubihsm_2_fips2.2--
OSyubicoyubihsm_2_fips_firmware---
OSyubicoyubihsm_2_firmware---
HWyubicoyubikey_5_nano---
HWyubicoyubikey_5_nano_fips---
OSyubicoyubikey_5_nano_fips_firmware---
OSyubicoyubikey_5_nano_firmware---
HWyubicoyubikey_5_nfc---
HWyubicoyubikey_5_nfc_fips---
OSyubicoyubikey_5_nfc_fips_firmware---
OSyubicoyubikey_5_nfc_firmware---
HWyubicoyubikey_5c---
HWyubicoyubikey_5c_fips---
OSyubicoyubikey_5c_fips_firmware---
OSyubicoyubikey_5c_firmware---
HWyubicoyubikey_5c_nano---
HWyubicoyubikey_5c_nano_fips---
OSyubicoyubikey_5c_nano_fips_firmware---
OSyubicoyubikey_5c_nano_firmware---
HWyubicoyubikey_5c_nfc---
HWyubicoyubikey_5c_nfc_fips---
OSyubicoyubikey_5c_nfc_fips_firmware---
OSyubicoyubikey_5c_nfc_firmware---
HWyubicoyubikey_5ci---
HWyubicoyubikey_5ci_fips---
OSyubicoyubikey_5ci_fips_firmware---
OSyubicoyubikey_5ci_firmware---
HWyubicoyubikey_bio---
OSyubicoyubikey_bio_firmware---
HWyubicoyubikey_c_bio---
OSyubicoyubikey_c_bio_firmware---

Explore more

Back to dashboardyubico CVEssecurity_key_c_nfc_by_yubico vulnerabilities