公式な情報もありました
Security Advisory YSA-2024-03 Infineon ECDSA Private Key Recovery
https://www.yubico.com/support/security-advisories/ysa-2024-03/
YubicoSecurity Advisory YSA-2024-03Security Advisory YSA-2024-03 Infineon ECDSA Private Key Recovery Published Date: 2024-09-03Tracking IDs: YSA-2024-03CVE: In ProcessCVSS Severity: 4.9 Summary A vulnerability was discovered in Infineon’s cryptographic library, which is utilized in YubiKey 5 Series, and Security Key Series with firmware prior to 5.7.0 and YubiHSM 2 with firmware prior to 2.4.0. The severity of the issue […]