CVE-2025-3301 - CVE House
Back to Database
Status published Low CVE-2025-3301

DPA Countermeasures Unavailable for Certain Cryptographic Operations on Series 2 Devices

Vulnerability Description

DPA countermeasures are unavailable for ECDH key agreement and EdDSA signing operations on Curve25519 and Curve448 on all Series 2 modules and SoCs due to a lack of hardware and software support. A successful DPA attack may result in exposure of confidential information. The best practice is to use the impacted crypto curves and operations with ephemeral keys to reduce the number of DPA traces that can be collected.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-3301

Credits & Attribution

No credits recorded in the NVD database.

References

More from silabs.com

View All →
CVE-2025-8414
Zigbee Green Power Host Buffer Overflow Vulnerability
Critical 9.4
CVE-2025-7964
Zigbee Router Denial of Service
Critical 9.2
CVE-2025-7448
Man in the middle (MitM) attack vulnerability in Wi-SUN library
High 8.6
CVE-2025-7432
DPA countermeasures not reseeded under certain conditions
Low 1
CVE-2025-4321
DoS in RS9116W-WiSeConnect L2CAP protocol due to reception of malformed packets
High 7.1

Affected Vendor

Affected Software

Series 2 SoCs and associated modules
Vulnerable Versions:
0

Timeline

Official Publish: April 29th, 2025
Last Modified: April 29th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-1255

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.