CVE-2025-3301lowCWE-1255

CVE-2025-3301: falha de baixa gravidade em silabs.com Series 2 SoCs and associated modules

DPA Countermeasures Unavailable for Certain Cryptographic Operations on Series 2 Devices

Publicada em

Seguir esta CVE+ Monitorar Series 2 SoCs and associated modules

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 1epss 0.2%
DPA countermeasures are unavailable for ECDH key agreement and EdDSA signing operations on Curve25519 and Curve448 on all Series 2 modules and SoCs due to a lack of hardware and software support. A successful DPA attack may result in exposure of confidential information. The best practice is to use the impacted crypto curves and operations with ephemeral keys to reduce the number of DPA traces that can be collected.
CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Produtos afetados
silabs.com · Series 2 SoCs and associated modules