CWE-1255: Comparison Logic is Vulnerable to Power Side-Channel Attacks
A device's real time power consumption may be monitored during security token evaluation and the information gleaned may be used to determine the value of the reference token.
A kind of CWE-1300 Improper Protection of Physical Side Channels.
From the CWE List. © The MITRE Corporation.
Newest
- sgbett secp256k1-native secp256k1-native: Compiler-reconstructed secret-dependent branch in native scalar multiplication 5.9 Medium
- silabs.com series 2 socs and associated modules DPA Countermeasures Unavailable for Certain Cryptographic Operations on Series 2 Devices 1.0 Low
- ietf tcp The TCP protocol in RFC 9293 has a timing side channel that makes it easier for remote attackers... 4.3 Medium
- rhonabwy project rhonabwy, debian linux +1 more In Rhonabwy through 1.1.13, HMAC signature verification uses a strcmp function that is vulnerable... 9.8 Critical
- hackerone keystone node module, keystonejs keystone +1 more Authentication Weakness in keystone 7.5 High