medium4.6
CVE-2023-41097
An Observable Timing Discrepancy, Covert Timing Channel vulnerability in Silabs GSDK on ARM potentially allows Padding Oracle Crypto Attack on CBC PKCS7.This i…
Impact
An Observable Timing Discrepancy, Covert Timing Channel vulnerability in Silabs GSDK on ARM potentially allows Padding Oracle Crypto Attack on CBC PKCS7.This issue affects GSDK: through 4.4.0.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Silabs | Gecko Software Development Kit | through 4.4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/SiliconLabs/gecko_sdk/releases
- https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm0000007rArIAI?operationContext=S1
- https://github.com/SiliconLabs/gecko_sdk/releases
- https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm0000007rArIAI?operationContext=S1