Phoenix Contact: Security Advisory for ESL Stick USB-A
A vulnerability has been found in a cryptographic library of Infineon Technologies that is part of the firmware of the CmDongles. The exploitation of this vulnerability has been classified as complex: potential attackers need physical access and require special equipment to exploit the vulnerability. In general, this vulnerability affects only ECC keys used to calculate signatures with the ECDSA algorithm.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-45678US | medium4.2 | — | ||
Yubico YubiKey 5 Series devices with firmware before 5.7.0 and YubiHSM 2 devices with firmware before 2.4.0 allow an ECDSA secret-key extraction attack (that requires physical acce… | ||||
references
External citations — patches, advisories, analysis.
remediations (2)
- FixedFirmware 4.5.2
Phoenix Contact strongly recommends upgrading affected ESL STICK USB A s to firmware version 4.5.2 which fixes this vulnerability.
https://www.wibu.com/support/faq/codemeter-hardware-general.html#faq-29694 - FixedFirmware 4.5.2 installed on ESL STICK USB A
Phoenix Contact strongly recommends upgrading affected ESL STICK USB A s to firmware version 4.5.2 which fixes this vulnerability.
https://www.wibu.com/support/faq/codemeter-hardware-general.html#faq-29694
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan