{"id":"CVE-2020-12788","aliases":["EUVD-2020-5073","GHSA-7pq8-3c67-xq6r"],"status":"published","title":"CMAC verification functionality in Microchip Atmel ATSAMA5 products is vulnerable to vulnerable...","description":"CMAC verification functionality in Microchip Atmel ATSAMA5 products is vulnerable to vulnerable to timing and power analysis attacks.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.01336,"percentile":0.71591,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-203"],"published":"2020-09-14T13:24:41Z","modified":"2026-06-17T02:52:18Z","products":[{"vendor":"microchip","product":"atsama5d21c-cu_firmware"},{"vendor":"microchip","product":"atsama5d21c-cur_firmware"},{"vendor":"microchip","product":"atsama5d225c-d1m-cur_firmware"},{"vendor":"microchip","product":"atsama5d22c-cn_firmware"},{"vendor":"microchip","product":"atsama5d22c-cnr_firmware"},{"vendor":"microchip","product":"atsama5d22c-cu_firmware"},{"vendor":"microchip","product":"atsama5d22c-cur_firmware"},{"vendor":"microchip","product":"atsama5d23c-cn_firmware"},{"vendor":"microchip","product":"atsama5d23c-cnr_firmware"},{"vendor":"microchip","product":"atsama5d23c-cu_firmware"},{"vendor":"microchip","product":"atsama5d23c-cur_firmware"},{"vendor":"microchip","product":"atsama5d24c-cu_firmware"},{"vendor":"microchip","product":"atsama5d24c-cuf_firmware"},{"vendor":"microchip","product":"atsama5d24c-cur_firmware"},{"vendor":"microchip","product":"atsama5d26c-cn_firmware"},{"vendor":"microchip","product":"atsama5d26c-cnr_firmware"},{"vendor":"microchip","product":"atsama5d26c-cu_firmware"},{"vendor":"microchip","product":"atsama5d26c-cur_firmware"},{"vendor":"microchip","product":"atsama5d27-som1_firmware"},{"vendor":"microchip","product":"atsama5d27-wlsom1_firmware"},{"vendor":"microchip","product":"atsama5d27c-cn_firmware"},{"vendor":"microchip","product":"atsama5d27c-cnr_firmware"},{"vendor":"microchip","product":"atsama5d27c-cnrvao_firmware"},{"vendor":"microchip","product":"atsama5d27c-cnvao_firmware"},{"vendor":"microchip","product":"atsama5d27c-cu_firmware"},{"vendor":"microchip","product":"atsama5d27c-cur_firmware"},{"vendor":"microchip","product":"atsama5d27c-d1g-cu_firmware"},{"vendor":"microchip","product":"atsama5d27c-d1g-cur_firmware"},{"vendor":"microchip","product":"atsama5d27c-d5m-cu_firmware"},{"vendor":"microchip","product":"atsama5d27c-d5m-cur_firmware"},{"vendor":"microchip","product":"atsama5d27c-ld1g-cu_firmware"},{"vendor":"microchip","product":"atsama5d27c-ld1g-cur_firmware"},{"vendor":"microchip","product":"atsama5d27c-ld2g-cu_firmware"},{"vendor":"microchip","product":"atsama5d27c-ld2g-cur_firmware"},{"vendor":"microchip","product":"atsama5d28c-cn_firmware"},{"vendor":"microchip","product":"atsama5d28c-cnr_firmware"},{"vendor":"microchip","product":"atsama5d28c-cu_firmware"},{"vendor":"microchip","product":"atsama5d28c-cur_firmware"},{"vendor":"microchip","product":"atsama5d28c-d1g-cu_firmware"},{"vendor":"microchip","product":"atsama5d28c-d1g-cur_firmware"},{"vendor":"microchip","product":"atsama5d28c-ld1g-cu_firmware"},{"vendor":"microchip","product":"atsama5d28c-ld1g-cur_firmware"},{"vendor":"microchip","product":"atsama5d28c-ld2g-cu_firmware"},{"vendor":"microchip","product":"atsama5d28c-ld2g-cur_firmware"},{"vendor":"microchip","product":"atsama5d31a-cfu_firmware"},{"vendor":"microchip","product":"atsama5d31a-cfur_firmware"},{"vendor":"microchip","product":"atsama5d31a-cu_firmware"},{"vendor":"microchip","product":"atsama5d31a-cur_firmware"},{"vendor":"microchip","product":"atsama5d33a-cu_firmware"},{"vendor":"microchip","product":"atsama5d33a-cur_firmware"},{"vendor":"microchip","product":"atsama5d34a-cu_firmware"},{"vendor":"microchip","product":"atsama5d34a-cur_firmware"},{"vendor":"microchip","product":"atsama5d35a-cn_firmware"},{"vendor":"microchip","product":"atsama5d35a-cnr_firmware"},{"vendor":"microchip","product":"atsama5d35a-cu_firmware"},{"vendor":"microchip","product":"atsama5d35a-cur_firmware"},{"vendor":"microchip","product":"atsama5d36a-cn_firmware"},{"vendor":"microchip","product":"atsama5d36a-cnr_firmware"},{"vendor":"microchip","product":"atsama5d36a-cu_firmware"},{"vendor":"microchip","product":"atsama5d36a-cur_firmware"},{"vendor":"microchip","product":"atsama5d41a-cu_firmware"},{"vendor":"microchip","product":"atsama5d41a-cur_firmware"},{"vendor":"microchip","product":"atsama5d41b-cu_firmware"},{"vendor":"microchip","product":"atsama5d41b-cur_firmware"},{"vendor":"microchip","product":"atsama5d42a-cu_firmware"},{"vendor":"microchip","product":"atsama5d42a-cur_firmware"},{"vendor":"microchip","product":"atsama5d42b-cu_firmware"},{"vendor":"microchip","product":"atsama5d42b-cur_firmware"},{"vendor":"microchip","product":"atsama5d43a-cu_firmware"},{"vendor":"microchip","product":"atsama5d43a-cur_firmware"},{"vendor":"microchip","product":"atsama5d43b-cu_firmware"},{"vendor":"microchip","product":"atsama5d43b-cur_firmware"},{"vendor":"microchip","product":"atsama5d44a-cu_firmware"},{"vendor":"microchip","product":"atsama5d44a-cur_firmware"},{"vendor":"microchip","product":"atsama5d44b-cu_firmware"},{"vendor":"microchip","product":"atsama5d44b-cur_firmware"}],"references":[{"url":"https://labs.f-secure.com/advisories/microchip-atsama5-soc-multiple-vulnerabilities/","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-12788"},{"url":"https://github.com/advisories/GHSA-7pq8-3c67-xq6r"}],"sources":{"cve":[{"id":"CVE-2020-12788","description":"CMAC verification functionality in Microchip Atmel ATSAMA5 products is vulnerable to vulnerable to timing and power analysis attacks.","status":"published","published":"2020-09-14T13:24:41Z","modified":"2024-08-04T12:04:22.87Z","updated_at":"2026-11-02T14:35:53.236501Z"}],"euvd":[{"id":"EUVD-2020-5073","description":"CMAC verification functionality in Microchip Atmel ATSAMA5 products is vulnerable to vulnerable to timing and power analysis attacks.","status":"published","published":"2020-09-14T13:24:41Z","modified":"2024-08-04T12:04:22Z","updated_at":"2026-11-03T03:07:39.298733Z"}],"ghsa":[{"id":"GHSA-7pq8-3c67-xq6r","title":"CMAC verification functionality in Microchip Atmel ATSAMA5 products is vulnerable to vulnerable...","description":"CMAC verification functionality in Microchip Atmel ATSAMA5 products is vulnerable to vulnerable to timing and power analysis attacks.","status":"published","published":"2022-05-24T17:28:14Z","modified":"2023-01-29T05:03:51Z","updated_at":"2026-11-02T14:45:24.688971Z"}],"nvd":[{"id":"CVE-2020-12788","description":"CMAC verification functionality in Microchip Atmel ATSAMA5 products is vulnerable to vulnerable to timing and power analysis attacks.","status":"published","published":"2020-09-14T14:15:10.82Z","modified":"2026-06-17T02:52:18.663Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-203"],"updated_at":"2026-11-02T14:06:14.981587Z"}]}}