{"id":"CVE-2020-27208","aliases":["EUVD-2020-19727","GHSA-m4fc-4f5m-5hhw","openSUSE-SU-2021:1019-1"],"status":"published","title":"The flash read-out protection (RDP) level is not enforced during the device initialization phase...","description":"The flash read-out protection (RDP) level is not enforced during the device initialization phase of the SoloKeys Solo 4.0.0 \u0026 Somu and the Nitrokey FIDO2 token. This allows an adversary to downgrade the RDP level and access secrets such as private ECC keys from SRAM via the debug interface.","severity":{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00328,"percentile":0.26085,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-326"],"published":"2021-05-21T11:17:50Z","modified":"2026-06-17T03:08:56Z","fixes":[{"ecosystem":"SUSE:Package Hub 15 SP2","package":"solo","fixed_in":["4.1.2-bp153.2.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP3","package":"solo","fixed_in":["4.1.2-bp153.2.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"solo","fixed_in":["4.1.2-bp153.2.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"solo","fixed_in":["4.1.2-bp153.2.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP2","package":"solo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-bp153.2.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP3","package":"solo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-bp153.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"solo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-bp153.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"solo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-bp153.2.3.1"}]}]}],"products":[{"vendor":"nitrokey","product":"fido2_firmware"},{"vendor":"solokeys","product":"solo_firmware"},{"vendor":"solokeys","product":"somu_firmware"}],"references":[{"url":"https://www.aisec.fraunhofer.de/en/FirmwareProtection.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://twitter.com/SoloKeysSec","tags":["x_refsource_MISC","x_transferred","Product"]},{"url":"https://solokeys.com","tags":["x_refsource_MISC","x_transferred","Product"]},{"url":"https://eprint.iacr.org/2021/640","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://github.com/solokeys/solo/commit/a9c02cd354f34b48195a342c7f524abdef5cbcec","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory"]},{"url":"https://www.aisec.fraunhofer.de/de/das-institut/wissenschaftliche-exzellenz/security-and-trust-in-open-source-security-tokens.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27208"},{"url":"https://github.com/advisories/GHSA-m4fc-4f5m-5hhw"},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KVSCA7DKULXER7BGQ3YJN34AY5RPCIU5/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1186848","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27208","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-27208","description":"The flash read-out protection (RDP) level is not enforced during the device initialization phase of the SoloKeys Solo 4.0.0 \u0026 Somu and the Nitrokey FIDO2 token. This allows an adversary to downgrade the RDP level and access secrets such as private ECC keys from SRAM via the debug interface.","status":"published","published":"2021-05-21T11:17:50Z","modified":"2024-08-04T16:11:35.926Z","updated_at":"2026-11-02T14:35:53.236501Z"}],"euvd":[{"id":"EUVD-2020-19727","description":"The flash read-out protection (RDP) level is not enforced during the device initialization phase of the SoloKeys Solo 4.0.0 \u0026 Somu and the Nitrokey FIDO2 token. This allows an adversary to downgrade the RDP level and access secrets such as private ECC keys from SRAM via the debug interface.","status":"published","published":"2021-05-21T11:17:50Z","modified":"2024-08-04T16:11:35Z","updated_at":"2026-11-03T03:07:13.515696Z"}],"ghsa":[{"id":"GHSA-m4fc-4f5m-5hhw","title":"The flash read-out protection (RDP) level is not enforced during the device initialization phase...","description":"The flash read-out protection (RDP) level is not enforced during the device initialization phase of the SoloKeys Solo 4.0.0 \u0026 Somu and the Nitrokey FIDO2 token. This allows an adversary to downgrade the RDP level and access secrets such as private ECC keys from SRAM via the debug interface.","status":"published","published":"2022-05-24T19:02:58Z","modified":"2023-01-29T05:06:46Z","cwes":["CWE-326"],"updated_at":"2026-11-02T14:46:05.929333Z"}],"nvd":[{"id":"CVE-2020-27208","description":"The flash read-out protection (RDP) level is not enforced during the device initialization phase of the SoloKeys Solo 4.0.0 \u0026 Somu and the Nitrokey FIDO2 token. This allows an adversary to downgrade the RDP level and access secrets such as private ECC keys from SRAM via the debug interface.","status":"published","published":"2021-05-21T12:15:07.663Z","modified":"2026-06-17T03:08:56.393Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-326"],"updated_at":"2026-11-02T14:06:39.25999Z"}],"osv":[{"id":"openSUSE-SU-2021:1019-1","title":"Security update for solo","description":"This update for solo fixes the following issues:\n\nUpdate to Solo 4.1.2\n\n* Fix boo#1186848 CVE-202-27208, security issue in firmware\n  source that is part of the source package.\n","status":"published","published":"2021-07-10T08:06:08Z","modified":"2026-02-04T03:19:47.435382Z","updated_at":"2026-11-02T16:58:31.879684Z"}]}}