CVE-2020-12788

HIGH

7.5

Description

CMAC verification functionality in Microchip Atmel ATSAMA5 products is vulnerable to vulnerable to timing and power analysis attacks.

CVE Details

CVSS v3.1 Score7.5

SeverityHIGH

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published9/14/2020

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

microchip:atsama5d21c-cumicrochip:atsama5d21c-cu_firmwaremicrochip:atsama5d21c-curmicrochip:atsama5d21c-cur_firmwaremicrochip:atsama5d225c-d1m-curmicrochip:atsama5d225c-d1m-cur_firmwaremicrochip:atsama5d22c-cnmicrochip:atsama5d22c-cn_firmwaremicrochip:atsama5d22c-cnrmicrochip:atsama5d22c-cnr_firmwaremicrochip:atsama5d22c-cumicrochip:atsama5d22c-cu_firmwaremicrochip:atsama5d22c-curmicrochip:atsama5d22c-cur_firmwaremicrochip:atsama5d23c-cnmicrochip:atsama5d23c-cn_firmwaremicrochip:atsama5d23c-cnrmicrochip:atsama5d23c-cnr_firmwaremicrochip:atsama5d23c-cumicrochip:atsama5d23c-cu_firmwaremicrochip:atsama5d23c-curmicrochip:atsama5d23c-cur_firmwaremicrochip:atsama5d24c-cumicrochip:atsama5d24c-cu_firmwaremicrochip:atsama5d24c-cufmicrochip:atsama5d24c-cuf_firmwaremicrochip:atsama5d24c-curmicrochip:atsama5d24c-cur_firmwaremicrochip:atsama5d26c-cnmicrochip:atsama5d26c-cn_firmwaremicrochip:atsama5d26c-cnrmicrochip:atsama5d26c-cnr_firmwaremicrochip:atsama5d26c-cumicrochip:atsama5d26c-cu_firmwaremicrochip:atsama5d26c-curmicrochip:atsama5d26c-cur_firmwaremicrochip:atsama5d27-som1microchip:atsama5d27-som1_firmwaremicrochip:atsama5d27-wlsom1microchip:atsama5d27-wlsom1_firmwaremicrochip:atsama5d27c-cnmicrochip:atsama5d27c-cn_firmwaremicrochip:atsama5d27c-cnrmicrochip:atsama5d27c-cnr_firmwaremicrochip:atsama5d27c-cnrvaomicrochip:atsama5d27c-cnrvao_firmwaremicrochip:atsama5d27c-cnvaomicrochip:atsama5d27c-cnvao_firmwaremicrochip:atsama5d27c-cumicrochip:atsama5d27c-cu_firmwaremicrochip:atsama5d27c-curmicrochip:atsama5d27c-cur_firmwaremicrochip:atsama5d27c-d1g-cumicrochip:atsama5d27c-d1g-cu_firmwaremicrochip:atsama5d27c-d1g-curmicrochip:atsama5d27c-d1g-cur_firmwaremicrochip:atsama5d27c-d5m-cumicrochip:atsama5d27c-d5m-cu_firmwaremicrochip:atsama5d27c-d5m-curmicrochip:atsama5d27c-d5m-cur_firmwaremicrochip:atsama5d27c-ld1g-cumicrochip:atsama5d27c-ld1g-cu_firmwaremicrochip:atsama5d27c-ld1g-curmicrochip:atsama5d27c-ld1g-cur_firmwaremicrochip:atsama5d27c-ld2g-cumicrochip:atsama5d27c-ld2g-cu_firmwaremicrochip:atsama5d27c-ld2g-curmicrochip:atsama5d27c-ld2g-cur_firmwaremicrochip:atsama5d28c-cnmicrochip:atsama5d28c-cn_firmwaremicrochip:atsama5d28c-cnrmicrochip:atsama5d28c-cnr_firmwaremicrochip:atsama5d28c-cumicrochip:atsama5d28c-cu_firmwaremicrochip:atsama5d28c-curmicrochip:atsama5d28c-cur_firmwaremicrochip:atsama5d28c-d1g-cumicrochip:atsama5d28c-d1g-cu_firmwaremicrochip:atsama5d28c-d1g-curmicrochip:atsama5d28c-d1g-cur_firmwaremicrochip:atsama5d28c-ld1g-cumicrochip:atsama5d28c-ld1g-cu_firmwaremicrochip:atsama5d28c-ld1g-curmicrochip:atsama5d28c-ld1g-cur_firmwaremicrochip:atsama5d28c-ld2g-cumicrochip:atsama5d28c-ld2g-cu_firmwaremicrochip:atsama5d28c-ld2g-curmicrochip:atsama5d28c-ld2g-cur_firmwaremicrochip:atsama5d31a-cfumicrochip:atsama5d31a-cfu_firmwaremicrochip:atsama5d31a-cfurmicrochip:atsama5d31a-cfur_firmwaremicrochip:atsama5d31a-cumicrochip:atsama5d31a-cu_firmwaremicrochip:atsama5d31a-curmicrochip:atsama5d31a-cur_firmwaremicrochip:atsama5d33a-cumicrochip:atsama5d33a-cu_firmwaremicrochip:atsama5d33a-curmicrochip:atsama5d33a-cur_firmwaremicrochip:atsama5d34a-cumicrochip:atsama5d34a-cu_firmwaremicrochip:atsama5d34a-curmicrochip:atsama5d34a-cur_firmwaremicrochip:atsama5d35a-cnmicrochip:atsama5d35a-cn_firmwaremicrochip:atsama5d35a-cnrmicrochip:atsama5d35a-cnr_firmwaremicrochip:atsama5d35a-cumicrochip:atsama5d35a-cu_firmwaremicrochip:atsama5d35a-curmicrochip:atsama5d35a-cur_firmwaremicrochip:atsama5d36a-cnmicrochip:atsama5d36a-cn_firmwaremicrochip:atsama5d36a-cnrmicrochip:atsama5d36a-cnr_firmwaremicrochip:atsama5d36a-cumicrochip:atsama5d36a-cu_firmwaremicrochip:atsama5d36a-curmicrochip:atsama5d36a-cur_firmwaremicrochip:atsama5d41a-cumicrochip:atsama5d41a-cu_firmwaremicrochip:atsama5d41a-curmicrochip:atsama5d41a-cur_firmwaremicrochip:atsama5d41b-cumicrochip:atsama5d41b-cu_firmwaremicrochip:atsama5d41b-curmicrochip:atsama5d41b-cur_firmwaremicrochip:atsama5d42a-cumicrochip:atsama5d42a-cu_firmwaremicrochip:atsama5d42a-curmicrochip:atsama5d42a-cur_firmwaremicrochip:atsama5d42b-cumicrochip:atsama5d42b-cu_firmwaremicrochip:atsama5d42b-curmicrochip:atsama5d42b-cur_firmwaremicrochip:atsama5d43a-cumicrochip:atsama5d43a-cu_firmwaremicrochip:atsama5d43a-curmicrochip:atsama5d43a-cur_firmwaremicrochip:atsama5d43b-cumicrochip:atsama5d43b-cu_firmwaremicrochip:atsama5d43b-curmicrochip:atsama5d43b-cur_firmwaremicrochip:atsama5d44a-cumicrochip:atsama5d44a-cu_firmwaremicrochip:atsama5d44a-curmicrochip:atsama5d44a-cur_firmwaremicrochip:atsama5d44b-cumicrochip:atsama5d44b-cu_firmwaremicrochip:atsama5d44b-curmicrochip:atsama5d44b-cur_firmware

Weaknesses (CWE)

CWE-203

References

https://labs.f-secure.com/advisories/microchip-atsama5-soc-multiple-vulnerabilities/(cve@mitre.org)

https://labs.f-secure.com/advisories/microchip-atsama5-soc-multiple-vulnerabilities/(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.