Skip to content
CVE PROGRAM SOURCE RECORD6.2 Medium

CVE-2023-51392

Silicon Labs EFR32xxx parts with classic key storage do not use hardware accelerated AES-CCM

Description

Ember ZNet between v7.2.0 and v7.4.0 used software AES-CCM instead of integrated hardware cryptographic accelerators, potentially increasing risk of electromagnetic and differential power analysis sidechannel attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

silabs.com Ember ZNet SDK

Default version status: unaffected

  • 7.2.0 to < 7.4.0affected

References