CVE-2024-9055

Summary

CVE-2024-9055 is a vulnerability affecting Silicon Labs' Series 2 devices. The DPA (Differential Power Analysis) countermeasures on these devices fail to get reseeded regularly, exposing them to potential attacks. An attacker could exploit this flaw to launch a DPA attack and eventually extract secret keys from the device. This vulnerability poses a significant risk to data security, particularly for applications where data confidentiality is paramount. Silicon Labs is urged to address this issue promptly by implementing regular countermeasure reseeding in their devices.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.