CVE-2025-3301

Katalog CVE

CVSS 1.0 · Low EPSS 0,22%

Kerentanan Comparison Logic is Vulnerable to Power Side-Channel Attacks. Skor CVSS 4.0 1.0 (Low) menurut silabs.com.

Deskripsi (NVD)

DPA countermeasures are unavailable for ECDH key agreement and EdDSA signing operations on Curve25519 and Curve448 on all Series 2 modules and SoCs due to a lack of hardware and software support. A successful DPA attack may result in exposure of confidential information. The best practice is to use the impacted crypto curves and operations with ephemeral keys to reduce the number of DPA traces that can be collected.

Rincian

Terbit di NVD

29 April 2025

Terakhir diubah

17 Juni 2026

Status NVD

Deferred

CVSS 4.0

1.0 (Low), sumber silabs.com
CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1255: Comparison Logic is Vulnerable to Power Side-Channel Attacks

EPSS (30 hari)

0,22% peluang dieksploitasi; lebih tinggi dari 12,1% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://community.silabs.com/068Vm00000O8qbY