CVE-2020-15000 Hardcoded credentials in n/a
Attackers with Admin PIN access can reset User PIN using a hardcoded Reset Code value in YubiKey OpenPGP implementation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-15000?
CVE-2020-15000 is a medium-severity vulnerability in n/a, published on 9 Jul 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A PIN management problem was discovered on Yubico YubiKey 5 devices 5.2.0 to 5.2.6. OpenPGP has three passwords: Admin PIN, Reset Code, and User PIN. The Reset Code is used to reset the User PIN, but it is disabled by default. A flaw in the implementation of OpenPGP sets the Reset Code to a known value upon initialization. If the retry counter for the Reset Code is set to non-zero without changing the Reset Code, this known value can be used to reset the User PIN. To set the retry counters, the Admin PIN is required.
Which versions are affected by CVE-2020-15000?
It affects 1 product.
Products include Yubico Yubikey 5 Nfc Firmware.
How do I fix CVE-2020-15000?
No fix has been published for CVE-2020-15000 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-15000 being exploited?
There is no known exploitation of CVE-2020-15000 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-cg49-hhrx-hw69.