CVE-2020-27209

Katalog CVE

CVSS 7.5 · High EPSS 1,5%

Kerentanan pada micro-ecc project micro-ecc. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

The ECDSA operation of the micro-ecc library 1.0 is vulnerable to simple power analysis attacks which allows an adversary to extract the private ECC key.

Rincian

Terbit di NVD

20 Mei 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

EPSS (30 hari)

1,5% peluang dieksploitasi; lebih tinggi dari 74,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/kmackay/micro-ecc/commit/1b5f5cea5145c96dd8791b9b2c41424fc74c2172 patch · advisory pihak ketiga
• https://eprint.iacr.org/2021/640 advisory pihak ketiga
• https://github.com/kmackay/micro-ecc/releases advisory pihak ketiga
• https://www.aisec.fraunhofer.de/de/das-institut/wissenschaftliche-exzellenz/security-and-trust-in-open-source-... advisory pihak ketiga
• https://www.aisec.fraunhofer.de/en/FirmwareProtection.html advisory pihak ketiga