Vulnerabilities > CVE-2023-41097 - Information Exposure Through Discrepancy vulnerability in Silabs Gecko Software Development KIT

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
silabs
CWE-203

Summary

An Observable Timing Discrepancy, Covert Timing Channel vulnerability in Silabs GSDK on ARM potentially allows Padding Oracle Crypto Attack on CBC PKCS7.This issue affects GSDK: through 4.4.0.

Common Weakness Enumeration (CWE)