CVE-2020-15001

An information leak was discovered on Yubico YubiKey 5 NFC devices 5.0.0 to 5.2.6 and 5.3.0 to 5.3.1. The OTP application allows a user to set optional access codes on OTP slots. This access code is intended to prevent unauthorized changes to OTP configurations. The access code is not checked when updating NFC specific components of the OTP configurations. This may allow an attacker to access configured OTPs and passwords stored in slots that were not configured by the user to be read over NFC, despite a user having set an access code. (Users who have not set an access code, or who have not configured the OTP slots, are not impacted by this issue.)

CVSS v3 5.3 MEDIUM
CVSS v2.0 2.9 LOW

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.6 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

2.9^/10

CVSS v2.0 : LOW

Vector : AV:A/AC:M/Au:N/C:P/I:N/A:N

Exploitability : 5.5 / Impact : 2.9

Access Vector ADJACENT_NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://www.yubico.com/support/security-advisories/ysa-2020-04/	Exploit Mitigation Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:yubico:yubikey_5_nfc_firmware::::::::
	cpe:2.3:o:yubico:yubikey_5_nfc_firmware::::::::

cpe:2.3:h:yubico:yubikey_5_nfc:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2020-07-09 19:15

Updated : 2023-12-10 13:27

NVD link : CVE-2020-15001

Mitre link : CVE-2020-15001

CVE.ORG link : CVE-2020-15001

JSON object : View

Products Affected

yubico

yubikey_5_nfc
yubikey_5_nfc_firmware

CWE

CWE-862

Missing Authorization

{"id": "CVE-2020-15001", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.9, "accessVector": "ADJACENT_NETWORK", "vectorString": "AV:A/AC:M/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 5.5, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.6}]}, "published": "2020-07-09T19:15:11.057", "references": [{"url": "https://www.yubico.com/support/security-advisories/ysa-2020-04/", "tags": ["Exploit", "Mitigation", "Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "An information leak was discovered on Yubico YubiKey 5 NFC devices 5.0.0 to 5.2.6 and 5.3.0 to 5.3.1. The OTP application allows a user to set optional access codes on OTP slots. This access code is intended to prevent unauthorized changes to OTP configurations. The access code is not checked when updating NFC specific components of the OTP configurations. This may allow an attacker to access configured OTPs and passwords stored in slots that were not configured by the user to be read over NFC, despite a user having set an access code. (Users who have not set an access code, or who have not configured the OTP slots, are not impacted by this issue.)"}, {"lang": "es", "value": "Se detect\u00f3 una fuga de informaci\u00f3n en los dispositivos Yubico YubiKey 5 NFC versiones 5.0.0 hasta 5.2.6 y 5.3.0 hasta 5.3.1. La aplicaci\u00f3n OTP permite al usuario establecer c\u00f3digos de acceso opcionales en los slots OTP. Este c\u00f3digo de acceso est\u00e1 destinado a impedir cambios no autorizados en las configuraciones de OTP. El c\u00f3digo de acceso no es comprobado al actualizar componentes espec\u00edficos de NFC de las configuraciones de OTP. Esto puede permitir a un atacante acceder a las OTP configuradas y contrase\u00f1as almacenadas en slots que el usuario no configur\u00f3 para que se lean a trav\u00e9s de NFC, a pesar de que un usuario haya establecido un c\u00f3digo de acceso. (Los usuarios que no han establecido un c\u00f3digo de acceso, o que no han configurado las slots OTP, no est\u00e1n afectados por este problema)"}], "lastModified": "2021-07-21T11:39:23.747", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:yubico:yubikey_5_nfc_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4FC63B85-292F-47E0-8F6B-B937CDBDC6DF", "versionEndIncluding": "5.2.6", "versionStartIncluding": "5.0.0"}, {"criteria": "cpe:2.3:o:yubico:yubikey_5_nfc_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D2514912-868E-4C6E-93DE-1527D88560BB", "versionEndIncluding": "5.3.1", "versionStartIncluding": "5.3.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:yubico:yubikey_5_nfc:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D1A090DE-CB10-4B10-AAED-8FD0FF8587EC"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}