CVE-2020-25082

An attacker with physical access to Nuvoton Trusted Platform Module (NPCT75x 7.2.x before 7.2.2.0) could extract an Elliptic Curve Cryptography (ECC) private…

Low · published August 10, 2021

CVSS v3.1
3.8
EPSS
0%
Percentile
10.2
In the wild
Unconfirmed
What it is

An attacker with physical access to Nuvoton Trusted Platform Module (NPCT75x 7.2.x before 7.2.2.0) could extract an Elliptic Curve Cryptography (ECC) private key via a side-channel attack against ECDSA, because of an Observable Timing Discrepancy.

The record
Technical detail
CVSS v3.1
3.8 · LOW
Vector
CVSS:3.1/AC:H/AV:P/A:N/C:H/I:N/PR:H/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00207 · 10.2th percentile
Published
2021-08-10T15:28Z
EPSS history
Timeline
  • 10 AUG 15:28Z
    An attacker with physical access to Nuvoton Trusted Platform Module (NPCT75x 7.2.x before 7.2.2.0) could extract an Elliptic Curve Cryptography (ECC) private…
    cvelistv5