CVE-2023-51392 in Ember ZNet SDK

Tóm tắt

Bởi MITRE • 23/02/2024

Ember ZNet between v7.2.0 and v7.4.0 used software AES-CCM instead of integrated hardware cryptographic accelerators, potentially increasing risk of electromagnetic and differential power analysis sidechannel attacks.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• chịu trách nhiệm: Silicon Labs
• Đặt trước: 18/12/2023
• Tiết lộ: 23/02/2024
• Kiểm duyệt: được chấp nhận
• mục: VDB-254650
• CPE: sẵn sàng
• CWE: CWE-327 (Đã xác nhận)
• CVSS: 9.8 (NVD)
• EPSS: 0.00244
• KEV: không
• Các hoạt động: rất thấp

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-51392
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-51392
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-51392/