CVE-2025-14972CWE-331
CVE-2025-14972
published May 15, 2026
What it is
* Countermeasures for DPA within SYMCRYPTO
engine on SixG301xxx devices are not sufficiently random and will
eventually repeat.
* KSU keys using SYMCRYPTO will be
impacted by this vulnerability.
The record
Technical detail
- CVSS
- 4.1 · NONE
- CVSS v4.0
- Not supplied
- EPSS
- 0.00146 · 3.5th percentile
- Weakness
- CWE-331 · Insufficient Entropy
- Published
- 2026-05-15T19:16Z
References (1)
EPSS history
Timeline