Description (CNA)
An Observable Timing Discrepancy, Covert Timing Channel vulnerability in Silabs GSDK on ARM potentially allows Padding Oracle Crypto Attack on CBC PKCS7.This issue affects GSDK: through 4.4.0.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| silabs.com / GSDK | affected 0 before 4.4.0 |
CWE
CWE-208, CWE-327
References
- https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm0000007rArIAI?operationContext=S1
- https://github.com/SiliconLabs/gecko_sdk/releases
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.