CVE-2023-51392 in Ember ZNet SDK

Riassunto

di MITRE • 23/02/2024

Ember ZNet between v7.2.0 and v7.4.0 used software AES-CCM instead of integrated hardware cryptographic accelerators, potentially increasing risk of electromagnetic and differential power analysis sidechannel attacks.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsabile: Silicon Labs
• Prenotare: 18/12/2023
• Divulgazione: 23/02/2024
• Moderazione: accettato
• Voce: VDB-254650
• CPE: pronto
• CWE: CWE-327 (confermato)
• CVSS: 9.8 (NVD)
• EPSS: 0.00244
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-51392
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-51392
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-51392/