CWE-1255 · Information Disclosure
Comparison Logic is Vulnerable to Power Side-Channel Attacks
3CVEs
SortMost likely exploited
3 CVEs with CWE-1255 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-25714In Rhonabwy through 1.1.13, HMAC signature verification uses a strcmp function that is vulnerable to side-channel attacks, because it stops the comparison when the first differenc…Rhonabwy Project · Rhonabwy · CVSS 9.1 · 2024-02-11 | 9.1 | 0.8% | 2024-02-11 |
| CVE-2024-39920The TCP protocol in RFC 9293 has a timing side channel that makes it easier for remote attackers to infer the content of one TCP connection from a client system (to any server), w…No vendor recorded · CVSS 4.3 · 2024-07-03 | 4.3 | 0.6% | 2024-07-03 |
| CVE-2025-3301DPA Countermeasures Unavailable for Certain Cryptographic Operations on Series 2 Devicessilabs.com · Series 2 SoCs and associated modules · CVSS 1 · 2025-04-29 | 1.0 | 0.2% | 2025-04-29 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.