VULNERABILITY INTELLIGENCE

CVE-2023-41097

CVSS score7.5 HIGH

EPSS probability0.30%

CISA KEVNot currently listed

Published2023-12-21

Last modified2026-06-17

Description

An Observable Timing Discrepancy, Covert Timing Channel vulnerability in Silabs GSDK on ARM potentially allows Padding Oracle Crypto Attack on CBC PKCS7.This issue affects GSDK: through 4.4.0.