Yubico Yubikey 5 Nfc Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Yubico Yubikey 5 Nfc Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2020-15000 — CVSS 5.9 (medium): A PIN management problem was discovered on Yubico YubiKey 5 devices 5.2.0 to 5.2.6. OpenPGP has three passwords: Admin PIN, Reset Code, and…
• CVE-2020-15001 — CVSS 5.3 (medium): An information leak was discovered on Yubico YubiKey 5 NFC devices 5.0.0 to 5.2.6 and 5.3.0 to 5.3.1. The OTP application allows a user to…
• CVE-2024-45678 — CVSS 4.2 (medium): Yubico YubiKey 5 Series devices with firmware before 5.7.0 and YubiHSM 2 devices with firmware before 2.4.0 allow an ECDSA secret-key…