CVE-2023-51392 in Ember ZNet SDK

الملخص

بحسب MITRE • 23/02/2024

Ember ZNet between v7.2.0 and v7.4.0 used software AES-CCM instead of integrated hardware cryptographic accelerators, potentially increasing risk of electromagnetic and differential power analysis sidechannel attacks.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• مسؤول: Silicon Labs
• حجز: 18/12/2023
• إفشاء: 23/02/2024
• الاعتدال: تمت الموافقة
• إدخال: VDB-254650
• CPE: جاهز
• CWE: CWE-327 (مؤكد)
• CVSS: 9.8 (NVD)
• EPSS: 0.00244
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-51392
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-51392
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-51392/