CVE-2024-9055

Published: Mar 17, 2025Modified: Jun 17, 2026Deferred

4.2

Vector

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 0.5 / Impact: 3.6

Source: product-security@silabs.com (Secondary)

Description

The DPA countermeasures on Silicon Labs' Series 2 devices are not reseeded periodically as they should be. This may allow an attacker to eventually extract secret keys through a DPA attack.

Related CWEs

CWE-331

Insufficient Entropy

The product uses an algorithm or scheme that produces insufficient entropy, leaving patterns or clusters of values that are more likely to occur than others.

References (1)

https://community.silabs.com/069Vm00000LJMlfIAH

Source: product-security@silabs.com

Timeline

No history available yet.