CVE-2023-41097

SiliconLabs/gecko_sdk
on github

Published

Severity

CVSS v3:
7.5 HIGH
CVSS v2:
N/A

Description

An Observable Timing Discrepancy, Covert Timing Channel vulnerability in Silabs GSDK on ARM potentially allows Padding Oracle Crypto Attack on CBC PKCS7.This issue affects GSDK: through 4.4.0.

References

Configurations

CPE23Version StartVersion EndExact Version
cpe:2.3:a:silabs:gecko_software_development_kit:*:*:*:*:*:*:*:*n/a4.4.0 (including)*

External Links