Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c3qr-cx32-288c

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An attacker with physical access to Nuvoton Trusted Platform Module (NPCT75x 7.2.x before 7.2.2.0) could extract an Elliptic Curve Cryptography (ECC) private key via a side-channel attack against ECDSA, because of an Observable Timing Discrepancy.

An attacker with physical access to Nuvoton Trusted Platform Module (NPCT75x 7.2.x before 7.2.2.0) could extract an Elliptic Curve Cryptography (ECC) private key via a side-channel attack against ECDSA, because of an Observable Timing Discrepancy.

EPSS

Процентиль: 18%
0.00059
Низкий

Дефекты

CWE-203

Связанные уязвимости

CVSS3: 3.8
nvd
больше 4 лет назад

An attacker with physical access to Nuvoton Trusted Platform Module (NPCT75x 7.2.x before 7.2.2.0) could extract an Elliptic Curve Cryptography (ECC) private key via a side-channel attack against ECDSA, because of an Observable Timing Discrepancy.

EPSS

Процентиль: 18%
0.00059
Низкий

Дефекты

CWE-203