7.5

CVE-2020-12788

CMAC verification functionality in Microchip Atmel ATSAMA5 products is vulnerable to vulnerable to timing and power analysis attacks.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microchip ≫ Atsama5d21c-cu Firmware Version-
   Microchip ≫ Atsama5d21c-cu Version-
Microchip ≫ Atsama5d22c-cn Firmware Version-
   Microchip ≫ Atsama5d22c-cn Version-
Microchip ≫ Atsama5d22c-cu Firmware Version-
   Microchip ≫ Atsama5d22c-cu Version-
Microchip ≫ Atsama5d23c-cn Firmware Version-
   Microchip ≫ Atsama5d23c-cn Version-
Microchip ≫ Atsama5d23c-cu Firmware Version-
   Microchip ≫ Atsama5d23c-cu Version-
Microchip ≫ Atsama5d24c-cu Firmware Version-
   Microchip ≫ Atsama5d24c-cu Version-
Microchip ≫ Atsama5d26c-cn Firmware Version-
   Microchip ≫ Atsama5d26c-cn Version-
Microchip ≫ Atsama5d26c-cu Firmware Version-
   Microchip ≫ Atsama5d26c-cu Version-
Microchip ≫ Atsama5d27c-cn Firmware Version-
   Microchip ≫ Atsama5d27c-cn Version-
Microchip ≫ Atsama5d27c-cu Firmware Version-
   Microchip ≫ Atsama5d27c-cu Version-
Microchip ≫ Atsama5d28c-cn Firmware Version-
   Microchip ≫ Atsama5d28c-cn Version-
Microchip ≫ Atsama5d28c-cu Firmware Version-
   Microchip ≫ Atsama5d28c-cu Version-
Microchip ≫ Atsama5d31a-cu Firmware Version-
   Microchip ≫ Atsama5d31a-cu Version-
Microchip ≫ Atsama5d33a-cu Firmware Version-
   Microchip ≫ Atsama5d33a-cu Version-
Microchip ≫ Atsama5d34a-cu Firmware Version-
   Microchip ≫ Atsama5d34a-cu Version-
Microchip ≫ Atsama5d35a-cu Firmware Version-
   Microchip ≫ Atsama5d35a-cu Version-
Microchip ≫ Atsama5d35a-cn Firmware Version-
   Microchip ≫ Atsama5d35a-cn Version-
Microchip ≫ Atsama5d36a-cu Firmware Version-
   Microchip ≫ Atsama5d36a-cu Version-
Microchip ≫ Atsama5d36a-cn Firmware Version-
   Microchip ≫ Atsama5d36a-cn Version-
Microchip ≫ Atsama5d41a-cu Firmware Version-
   Microchip ≫ Atsama5d41a-cu Version-
Microchip ≫ Atsama5d41b-cu Firmware Version-
   Microchip ≫ Atsama5d41b-cu Version-
Microchip ≫ Atsama5d42a-cu Firmware Version-
   Microchip ≫ Atsama5d42a-cu Version-
Microchip ≫ Atsama5d42b-cu Firmware Version-
   Microchip ≫ Atsama5d42b-cu Version-
Microchip ≫ Atsama5d43a-cu Firmware Version-
   Microchip ≫ Atsama5d43a-cu Version-
Microchip ≫ Atsama5d43b-cu Firmware Version-
   Microchip ≫ Atsama5d43b-cu Version-
Microchip ≫ Atsama5d44a-cu Firmware Version-
   Microchip ≫ Atsama5d44a-cu Version-
Microchip ≫ Atsama5d44b-cu Firmware Version-
   Microchip ≫ Atsama5d44b-cu Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.32% 0.516
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-203 Observable Discrepancy

The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.