← Back

Somu Firmware

somu_firmware

Vendor: Solokeys • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Nitrokey
Solokeys
3Fido2 Firmware
Solo FirmwareSomu Firmware
Jun 17, 2026
May 21, 2021
N/A· v4
6.8 MEDIUM· v3
4.6 MEDIUM· v2
The flash read-out protection (RDP) level is not enforced during the device initialization phase of the SoloKeys Solo 4.0.0 & Somu and the Nitrokey FIDO2 token. This allows an adversary to downgrade the RDP level and acc...Show more
The flash read-out protection (RDP) level is not enforced during the device initialization phase of the SoloKeys Solo 4.0.0 & Somu and the Nitrokey FIDO2 token. This allows an adversary to downgrade the RDP level and access secrets such as private ECC keys from SRAM via the debug interface.Show less