SolokeysCVEs & Vulnerabilities

1 CVEs affecting Solokeys products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

solo 1solo firmware 1somu 1somu firmware 1

CVE-2020-27208MEDIUM

The flash read-out protection (RDP) level is not enforced during the device initialization phase of the SoloKeys Solo 4.0.0 & Somu and the Nitrokey FIDO2 token. This allows an adversary to downgrade the RDP level and access secrets such as private ECC keys from SRAM via the debug interface.

21 May 2021

6.8

CVSS

← PrevPage 1 / 1Next →

← All Vendors·CVE Database