Phoenix Contact: Security Advisory for ESL Stick USB-A
A vulnerability has been found in a cryptographic library of Infineon Technologies that is part of the firmware of the CmDongles. The exploitation of this vulnerability has been classified as complex: potential attackers need physical access and require special equipment to exploit the vulnerability. In general, this vulnerability affects only ECC keys used to calculate signatures with the ECDSA algorithm.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-45678US | medium4.2 | — | ||
Yubico YubiKey 5 Series devices with firmware before 5.7.0 and YubiHSM 2 devices with firmware before 2.4.0 allow an ECDSA secret-key extraction attack (that requires physical acce… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (2)
- BehobenFirmware 4.5.2
Phoenix Contact strongly recommends upgrading affected ESL STICK USB A s to firmware version 4.5.2 which fixes this vulnerability.
https://www.wibu.com/support/faq/codemeter-hardware-general.html#faq-29694 - BehobenFirmware 4.5.2 installed on ESL STICK USB A
Phoenix Contact strongly recommends upgrading affected ESL STICK USB A s to firmware version 4.5.2 which fixes this vulnerability.
https://www.wibu.com/support/faq/codemeter-hardware-general.html#faq-29694
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan