CVEvulnerability
CVE-2020-12788
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-09-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-203
Description
CMAC verification functionality in Microchip Atmel ATSAMA5 products is vulnerable to vulnerable to timing and power analysis attacks.
Affected configurations
• microchip atsama5d21c-cu firmware
• microchip atsama5d21c-cur firmware
• microchip atsama5d22c-cn firmware
• microchip atsama5d22c-cnr firmware
• microchip atsama5d22c-cu firmware
• microchip atsama5d22c-cur firmware
• microchip atsama5d23c-cn firmware
• microchip atsama5d23c-cnr firmware
• microchip atsama5d23c-cu firmware
• microchip atsama5d23c-cur firmware
• microchip atsama5d24c-cu firmware
• microchip atsama5d24c-cuf firmware
• microchip atsama5d24c-cur firmware
• microchip atsama5d26c-cn firmware
• microchip atsama5d26c-cnr firmware
• microchip atsama5d26c-cu firmware
• microchip atsama5d26c-cur firmware
• microchip atsama5d27c-cn firmware
• microchip atsama5d27c-cnr firmware
• microchip atsama5d27c-cu firmware
• microchip atsama5d27c-cur firmware
• microchip atsama5d28c-cn firmware
• microchip atsama5d28c-cnr firmware
• microchip atsama5d28c-cu firmware
• microchip atsama5d28c-cur firmware
• microchip atsama5d27c-cnvao firmware
• microchip atsama5d27c-cnrvao firmware
• microchip atsama5d225c-d1m-cur firmware
• microchip atsama5d27c-d5m-cu firmware
• microchip atsama5d27c-d5m-cur firmware
• microchip atsama5d27c-d1g-cu firmware
• microchip atsama5d27c-d1g-cur firmware
• microchip atsama5d28c-d1g-cu firmware
• microchip atsama5d28c-d1g-cur firmware
• microchip atsama5d27c-ld1g-cu firmware
• microchip atsama5d27c-ld1g-cur firmware
• microchip atsama5d27c-ld2g-cu firmware
• microchip atsama5d27c-ld2g-cur firmware
• microchip atsama5d28c-ld1g-cu firmware
• microchip atsama5d28c-ld1g-cur firmware
• microchip atsama5d28c-ld2g-cu firmware
• microchip atsama5d28c-ld2g-cur firmware
• microchip atsama5d27-wlsom1 firmware
• microchip atsama5d27-som1 firmware
• microchip atsama5d31a-cu firmware
• microchip atsama5d31a-cur firmware
• microchip atsama5d31a-cfu firmware
• microchip atsama5d31a-cfur firmware
• microchip atsama5d33a-cu firmware
• microchip atsama5d33a-cur firmware
• microchip atsama5d34a-cu firmware
• microchip atsama5d34a-cur firmware
• microchip atsama5d35a-cu firmware
• microchip atsama5d35a-cur firmware
• microchip atsama5d35a-cn firmware
• microchip atsama5d35a-cnr firmware
• microchip atsama5d36a-cu firmware
• microchip atsama5d36a-cur firmware
• microchip atsama5d36a-cn firmware
• microchip atsama5d36a-cnr firmware
… and 16 more
Related
Weakness · CWE (1)
- CWE-203 Observable Discrepancy weakness
Referenced by CWE · observed example (1)
- CWE-1255 Comparison Logic is Vulnerable to Power Side-Channel Attacks weakness
References
- https://labs.f-secure.com/advisories/microchip-atsama5-soc-multiple-vulnerabilities/ Third Party Advisory
- https://labs.f-secure.com/advisories/microchip-atsama5-soc-multiple-vulnerabilities/ Third Party Advisory