CVE-2023-51392 in Ember ZNet SDK

Sumário

de MITRE • 23/02/2024

Ember ZNet between v7.2.0 and v7.4.0 used software AES-CCM instead of integrated hardware cryptographic accelerators, potentially increasing risk of electromagnetic and differential power analysis sidechannel attacks.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsável: Silicon Labs
• Reservar: 18/12/2023
• Divulgação: 23/02/2024
• Moderação: aceite
• Entrada: VDB-254650
• CPE: pronto
• CWE: CWE-327 (confirmado)
• CVSS: 9.8 (NVD)
• EPSS: 0.00244
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-51392
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-51392
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-51392/