CVE-2024-35311
Low
Description
Yubico YubiKey 5 Series before 5.7.0, Security Key Series before 5.7.0, YubiKey Bio Series before 5.6.4, and YubiKey 5 FIPS before 5.7.2 have Incorrect Access Control.
SeverityLow
CVSS3.3
Exploit probability—
ProductYubiKey 5 Series
PublishedMay 29, 2024
First seenMay 29, 2024
Weakness typeCWE-922CWE-922
How to fix
Update
- Yubico YubiKey 5 Series5.7.0 or later
- Yubico Security Key Series5.7.0 or later
- Yubico YubiKey Bio Series5.6.4 or later
- Yubico YubiKey 5 FIPS5.7.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Yubico YubiKey 5 Series | No range specified | 5.7.0 |
| Yubico Security Key Series | No range specified | 5.7.0 |
| Yubico YubiKey Bio Series | No range specified | 5.6.4 |
| Yubico YubiKey 5 FIPS | No range specified | 5.7.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.