Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The flash read-out protection (RDP) level is not enforced during the device initialization phase of the SoloKeys Solo 4.0.0 & Somu and the Nitrokey FIDO2 token. This allows an adversary to downgrade the RDP level and access secrets such as private ECC keys from SRAM via the debug interface.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SoloKeys Solo 加密问题漏洞
Vulnerability Description
SoloKeys Solo是一个开源安全密钥。 SoloKeys Solo 4.0.0 & Somu and the Nitrokey FIDO2 token 存在安全漏洞，该漏洞源于不强制执行flash读出保护(RDP)级别。这允许攻击者降低RDP级别。
CVSS Information
N/A
Vulnerability Type
N/A