Medium · 6.2 CVE-2023-51392 EUVD-2023-56113GHSA-qfrv-fmc5-hmmh

Silicon Labs EFR32xxx parts with classic key storage do not use hardware accelerated AES-CCM

Published Feb 23, 2024 · Updated Apr 22, 2025 · Assigned by Silabs

Vendor: silabs.com Product: Ember ZNet SDK

Description

Ember ZNet between v7.2.0 and v7.4.0 used software AES-CCM instead of integrated hardware cryptographic accelerators, potentially increasing risk of electromagnetic and differential power analysis sidechannel attacks.

Affected products

Vendor	Product	Affected	Fixed
silabs.com	Ember ZNet SDK	7.2.0 – < 7.4.0	7.4.0

References

https://community.silabs.com/068Vm000001BKm6