Ember ZNet Vulnerability: Risk of Sidechannel Attacks

CVE-2023-51392

What is CVE-2023-51392?

The Ember ZNet software, versions 7.2.0 to 7.4.0, utilizes software-based AES-CCM for encryption instead of leveraging built-in hardware cryptographic accelerators. This design choice may expose the system to potential attacks through differential power analysis and electromagnetic analysis, putting the integrity and confidentiality of sensitive data at risk. Users of these versions should consider updating to mitigate the potential attack pathways.

References