CVE-2020-12788

Published: Sep 14, 2020Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

CMAC verification functionality in Microchip Atmel ATSAMA5 products is vulnerable to vulnerable to timing and power analysis attacks.

Affected (76)

Microchip

76 products

Atsama5d21c Cu Firmware

Atsama5d21c Cur Firmware

Atsama5d22c Cn Firmware

Atsama5d22c Cnr Firmware

Atsama5d22c Cu Firmware

Atsama5d22c Cur Firmware

Atsama5d23c Cn Firmware

Atsama5d23c Cnr Firmware

Atsama5d23c Cu Firmware

Atsama5d23c Cur Firmware

Atsama5d24c Cu Firmware

Atsama5d24c Cuf Firmware

Atsama5d24c Cur Firmware

Atsama5d26c Cn Firmware

Atsama5d26c Cnr Firmware

Atsama5d26c Cu Firmware

Atsama5d26c Cur Firmware

Atsama5d27c Cn Firmware

Atsama5d27c Cnr Firmware

Atsama5d27c Cu Firmware

Atsama5d27c Cur Firmware

Atsama5d28c Cn Firmware

Atsama5d28c Cnr Firmware

Atsama5d28c Cu Firmware

Atsama5d28c Cur Firmware

Atsama5d27c Cnvao Firmware

Atsama5d27c Cnrvao Firmware

Atsama5d225c D1m Cur Firmware

Atsama5d27c D5m Cu Firmware

Atsama5d27c D5m Cur Firmware

Atsama5d27c D1g Cu Firmware

Atsama5d27c D1g Cur Firmware

Atsama5d28c D1g Cu Firmware

Atsama5d28c D1g Cur Firmware

Atsama5d27c Ld1g Cu Firmware

Atsama5d27c Ld1g Cur Firmware

Atsama5d27c Ld2g Cu Firmware

Atsama5d27c Ld2g Cur Firmware

Atsama5d28c Ld1g Cu Firmware

Atsama5d28c Ld1g Cur Firmware

Atsama5d28c Ld2g Cu Firmware

Atsama5d28c Ld2g Cur Firmware

Atsama5d27 Wlsom1 Firmware

Atsama5d27 Som1 Firmware

Atsama5d31a Cu Firmware

Atsama5d31a Cur Firmware

Atsama5d31a Cfu Firmware

Atsama5d31a Cfur Firmware

Atsama5d33a Cu Firmware

Atsama5d33a Cur Firmware

Atsama5d34a Cu Firmware

Atsama5d34a Cur Firmware

Atsama5d35a Cu Firmware

Atsama5d35a Cur Firmware

Atsama5d35a Cn Firmware

Atsama5d35a Cnr Firmware

Atsama5d36a Cu Firmware

Atsama5d36a Cur Firmware

Atsama5d36a Cn Firmware

Atsama5d36a Cnr Firmware

Atsama5d41a Cu Firmware

Atsama5d41a Cur Firmware

Atsama5d41b Cu Firmware

Atsama5d41b Cur Firmware

Atsama5d42a Cu Firmware

Atsama5d42a Cur Firmware

Atsama5d42b Cu Firmware

Atsama5d42b Cur Firmware

Atsama5d43a Cu Firmware

Atsama5d43a Cur Firmware

Atsama5d43b Cu Firmware

Atsama5d43b Cur Firmware

Atsama5d44a Cu Firmware

Atsama5d44a Cur Firmware

Atsama5d44b Cu Firmware

Atsama5d44b Cur Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d21c Cu Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d21c Cu	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d21c Cur Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d21c Cur	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d22c Cn Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d22c Cn	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d22c Cnr Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d22c Cnr	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d22c Cu Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d22c Cu	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d22c Cur Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d22c Cur	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d23c Cn Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d23c Cn	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d23c Cnr Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d23c Cnr	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d23c Cu Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d23c Cu	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d23c Cur Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d23c Cur	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d24c Cu Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d24c Cu	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d24c Cuf Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d24c Cuf	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d24c Cur Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d24c Cur	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d26c Cn Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d26c Cn	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d26c Cnr Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d26c Cnr	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d26c Cu Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d26c Cu	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d26c Cur Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d26c Cur	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d27c Cn Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d27c Cn	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d27c Cnr Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d27c Cnr	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d27c Cu Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d27c Cu	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d27c Cur Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d27c Cur	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d28c Cn Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d28c Cn	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d28c Cnr Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d28c Cnr	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d28c Cu Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d28c Cu	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d28c Cur Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d28c Cur	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d27c Cnvao Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d27c Cnvao	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d27c Cnrvao Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d27c Cnrvao	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d225c D1m Cur Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d225c D1m Cur	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d27c D5m Cu Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d27c D5m Cu	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d27c D5m Cur Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d27c D5m Cur	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d27c D1g Cu Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d27c D1g Cu	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d27c D1g Cur Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d27c D1g Cur	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d28c D1g Cu Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d28c D1g Cu	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d28c D1g Cur Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d28c D1g Cur	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d27c Ld1g Cu Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d27c Ld1g Cu	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d27c Ld1g Cur Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d27c Ld1g Cur	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d27c Ld2g Cu Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d27c Ld2g Cu	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d27c Ld2g Cur Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d27c Ld2g Cur	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d28c Ld1g Cu Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d28c Ld1g Cu	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d28c Ld1g Cur Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d28c Ld1g Cur	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d28c Ld2g Cu Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d28c Ld2g Cu	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d28c Ld2g Cur Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d28c Ld2g Cur	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d27 Wlsom1 Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d27 Wlsom1	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d27 Som1 Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d27 Som1	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d31a Cu Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d31a Cu	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d31a Cur Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d31a Cur	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d31a Cfu Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d31a Cfu	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d31a Cfur Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d31a Cfur	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d33a Cu Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d33a Cu	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d33a Cur Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d33a Cur	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d34a Cu Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d34a Cu	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d34a Cur Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d34a Cur	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d35a Cu Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d35a Cu	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d35a Cur Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d35a Cur	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d35a Cn Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d35a Cn	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d35a Cnr Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d35a Cnr	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d36a Cu Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d36a Cu	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d36a Cur Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d36a Cur	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d36a Cn Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d36a Cn	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d36a Cnr Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d36a Cnr	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d41a Cu Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d41a Cu	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d41a Cur Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d41a Cur	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d41b Cu Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d41b Cu	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d41b Cur Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d41b Cur	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d42a Cu Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d42a Cu	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d42a Cur Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d42a Cur	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d42b Cu Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d42b Cu	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d42b Cur Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d42b Cur	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d43a Cu Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d43a Cu	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d43a Cur Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d43a Cur	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d43b Cu Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d43b Cu	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d43b Cur Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d43b Cur	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d44a Cu Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d44a Cu	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d44a Cur Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d44a Cur	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d44b Cu Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d44b Cu	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Atsama5d44b Cur Firmware	All versions

Running on/with	Platform Versions
Microchip Atsama5d44b Cur	All versions

Related CWEs

CWE-203

Observable Discrepancy

The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.

References (2)

https://labs.f-secure.com/advisories/microchip-atsama5-soc-multiple-vulnerabilities/

Source: cve@mitre.org

Third Party Advisory

https://labs.f-secure.com/advisories/microchip-atsama5-soc-multiple-vulnerabilities/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.