CVE-2026-6923CWE-1300

Nuvoton - CWE-1300: Improper Protection of Physical Side Channels

Low · published May 14, 2026

CVSS v3.1
3.8
EPSS
0%
Percentile
4.9
In the wild
Unconfirmed
What it is

A side-channel attack, which requires a physical presence to the TPM, can lead to extraction of an Elliptic Curve Diffie-Hellman (ECDH) key.

The record
Technical detail
CVSS v3.1
3.8 · LOW
Vector
CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00160 · 4.9th percentile
Weakness
CWE-1300 · Improper Protection of Physical Side Channels
Published
2026-05-14T16:14Z
EPSS history
Timeline
  • 14 MAY 16:14Z
    Nuvoton - CWE-1300: Improper Protection of Physical Side Channels
    cvelistv5