CVE-2026-89172

Published: Sep 12, 2026Modified: Sep 16, 2026

5.6

Vector

CVSS:4.0/AV:P/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:P/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: dc3f6da9-85b5-4a73-84a2-2ec90b40fca5 (Secondary)

Description

Improper protection of physical side channels vulnerability in Microchip AN1044, Microchip AN953, and Microchip SW300052. This issue affects AN1044: through A; AN953: through A; SW300052: through 2.6.

Related CWEs

CWE-1300

Improper Protection of Physical Side Channels

The device does not contain sufficient protection mechanisms to prevent physical side channels from exposing sensitive information due to patterns in physically observable phenomena such as variations in power consumption, electromagnetic emissions (EME), or acoustic emissions.

References (4)

https://www.microchip.com/en-us/application-notes/an1044

Source: dc3f6da9-85b5-4a73-84a2-2ec90b40fca5

https://www.microchip.com/en-us/application-notes/an953

Source: dc3f6da9-85b5-4a73-84a2-2ec90b40fca5

https://www.microchip.com/en-us/development-tool/sw300052

Source: dc3f6da9-85b5-4a73-84a2-2ec90b40fca5

https://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/side-channel-attack-an1044-an953-sw300052-cryptographic-algorithms

Source: dc3f6da9-85b5-4a73-84a2-2ec90b40fca5

Timeline

No history available yet.