{"affected":[{"affectedData":[{"defaultStatus":"affected","packageName":"EFR32/EFM32 Series 2 Devices","product":"Series 2 SoCs and associated modules","vendor":"silabs.com","versions":[{"lessThanOrEqual":"all released hardware revisions","status":"affected","version":"0","versionType":"custom"}]}],"source":"product-security@silabs.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"DPA countermeasures are unavailable for ECDH key agreement and EdDSA signing operations on Curve25519 and Curve448 on all Series 2 modules and SoCs due to a lack of hardware and software support. A successful DPA attack may result in exposure of confidential information. The best practice is to use the impacted crypto curves and operations with ephemeral keys to reduce the number of DPA traces that can be collected."},{"lang":"es","value":"Las contramedidas DPA no están disponibles para las operaciones de acuerdo de claves ECDH y firma EdDSA en Curve25519 y Curve448 en todos los módulos y SoCs Serie 2 debido a la falta de soporte de hardware y software. Un ataque DPA exitoso puede resultar en la exposición de información confidencial. La mejor práctica es utilizar las curvas criptográficas afectadas y las operaciones con claves efímeras para reducir la cantidad de rastros DPA que se pueden recopilar."}],"id":"CVE-2025-3301","lastModified":"2026-06-17T09:19:36.243","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"PHYSICAL","availabilityRequirement":"NOT_DEFINED","baseScore":1.0,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"product-security@silabs.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-3301","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-04-29T14:01:49.964106Z","version":"2.0.3"}}]},"published":"2025-04-29T14:15:32.643","references":[{"source":"product-security@silabs.com","url":"https://community.silabs.com/068Vm00000O8qbY"}],"sourceIdentifier":"product-security@silabs.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-1255"}],"source":"product-security@silabs.com","type":"Secondary"}]}