Decryption of Encrypted Communication through Timing Discrepancy

CVE-2024-39921

What is CVE-2024-39921?

The vulnerability presents itself as a timing discrepancy issue within Fujitsu's IPCOM EX2 and VE2 Series products. This flaw allows an attacker to exploit the timing discrepancies to potentially decrypt sections of encrypted communications. The affected products range from specific release versions in the IPCOM EX2 Series to particular models within the VE2 Series. This poses a significant risk, as the integrity and confidentiality of transmitted data can be compromised, enabling unauthorized access to sensitive communications.

References