PT-2021-11313 · Nitrokey+2 · Nitrokey Fido2 Token+2

Published 2021-05-21 · Updated 2021-07-10 · CVE-2020-27208

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: SoloKeys Solo versions 4.0.0 Nitrokey FIDO2 token (affected versions not specified)

Description: The issue concerns the flash read-out protection (RDP) level not being enforced during the device initialization phase. This allows an adversary to downgrade the RDP level and access secrets, such as private ECC keys from SRAM, via the debug interface.

Recommendations: For SoloKeys Solo version 4.0.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Nitrokey FIDO2 token, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Inadequate Encryption Strength

Weakness Enumeration

CWE-326

Related Identifiers

CVE-2020-27208

OPENSUSE-SU-2021:1019-1

OPENSUSE-SU-2021_1019-1

Affected Products

Nitrokey Fido2 Token

Solo

Suse

References · 13

• 🔥 https://aisec.fraunhofer.de/en/FirmwareProtection.html · Exploit
• https://github.com/solokeys/solo/commit/a9c02cd354f34b48195a342c7f524abdef5cbcec · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2021:1019-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-27208 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-27208 · Security Note
• https://aisec.fraunhofer.de/de/das-institut/wissenschaftliche-exzellenz/security-and-trust-in-open-source-security-tokens.html · Note
• https://suse.com/security/cve/CVE-2020-27208 · Note
• https://t.me/cvenotify/14795 · Telegram Post
• https://bugzilla.suse.com/1186848 · Note
• https://eprint.iacr.org/2021/640 · Note
• https://solokeys.com · Note
• https://twitter.com/SoloKeysSec · Note
• https://lists.opensuse.org/archives/list/[e-mail]/thread/KVSCA7DKULXER7BGQ3YJN34AY5RPCIU5 · Note