CVE:CVE-2020-27208
CNNVD:CNNVD-202105-1365
SoloKeys Solo是一个开源安全密钥。
SoloKeys Solo 4.0.0 & Somu and the Nitrokey FIDO2 token 存在安全漏洞，该漏洞源于不强制执行flash读出保护(RDP)级别。这允许攻击者降低RDP级别。
solution:Upgrade solokeys solo_firmware to a higher version than 4.0.0,and avoid the version 4.0.0; Upgrade solokeys somu_firmware to a higher version than -; Upgrade nitrokey fido2_firmware to a higher version than -