CVE-2025-3301
LOW EPSS 8.1%
Published Apr 29, 20251y ago · Modified Jun 17, 20262w ago
1.0 CVSS 4.0
Published Apr 29, 2025 1y ago
Last Modified Jun 17, 2026 2w ago
Description
DPA countermeasures are unavailable for ECDH key agreement and EdDSA signing operations on Curve25519 and Curve448 on all Series 2 modules and SoCs due to a lack of hardware and software support. A successful DPA attack may result in exposure of confidential information. The best practice is to use the impacted crypto curves and operations with ephemeral keys to reduce the number of DPA traces that can be collected.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Attack Vector Physical
Attack Complexity Low
Privileges Required None
User Interaction None
Scope X
Threat Intelligence
EPSS Exploit Probability
8.1% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-1255
References 1
- community.silabs.com https://community.silabs.com/068Vm00000O8qbY
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.