CVE-2025-3301 | THREATINT

Description

DPA countermeasures are unavailable for ECDH key agreement and EdDSA signing operations on Curve25519 and Curve448 on all Series 2 modules and SoCs due to a lack of hardware and software support. A successful DPA attack may result in exposure of confidential information. The best practice is to use the impacted crypto curves and operations with ephemeral keys to reduce the number of DPA traces that can be collected.

PUBLISHED Reserved 2025-04-04 | Published 2025-04-29 | Updated 2025-04-29 | Assigner Silabs

LOW: 1.0CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Problem types

CWE-1255 Comparison Logic is Vulnerable to Power Side-Channel Attacks

Product status

Default status

affected

Any version

affected

References

community.silabs.com/068Vm00000O8qbY vendor-advisory permissions-required

cve.org (CVE-2025-3301)

nvd.nist.gov (CVE-2025-3301)

Download JSON