VDB
CVE-2020-27208
CVE-2020-27208
PUBLISHED
Reported by mitre · Published May 21, 2021
The flash read-out protection (RDP) level is not enforced during the device initialization phase of the SoloKeys Solo 4.0.0 & Somu and the Nitrokey FIDO2 token. This allows an adversary to downgrade the RDP level and access secrets such as private ECC keys from SRAM via the debug interface.
Affected products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| n/a | n/a | * |
Timeline
- May 21, 2021 CVE Published
- May 22, 2021 EPSS Score (30 in total, the first dated here)
- Aug 4, 2024 CVE Updated
- Apr 4, 2026 Security Advisory (2 in total, the first dated here)
- Sep 1, 2026 Coalition ESS Score
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2020-27208
vulnetix vdb fixes CVE-2020-27208Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2020-27208/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart