2169
Reference Description
CVE-2020-28368 virtualization product allows recovery of AES keys from the guest OS using a
side channel attack against a power/energy monitoring interface.
https://www.cve.org/CVERecord?id=CVE-2020-28368
CVE-2019-18673 power consumption varies based on number of pixels being illuminated in a
display, allowing reading of secrets such as the PIN by using the USB interface
to measure power consumption
https://www.cve.org/CVERecord?id=CVE-2019-18673
Functional Areas
• Power
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 1343 Weaknesses in the 2021 CWE Most Important
Hardware Weaknesses List
1343 2592
MemberOf 1388 Physical Access Issues and Concerns 1194 2518
MemberOf 1417 Comprehensive Categorization: Sensitive Information
Exposure
1400 2548
Related Attack Patterns
CAPEC-ID Attack Pattern Name
189 Black Box Reverse Engineering
699 Eavesdropping on a Monitor
References
[REF-1117]Paul Kocher, Joshua Jaffe and Benjamin Jun. "Introduction to differential power
analysis and related attacks". 1998. < https://www.rambus.com/wp-content/uploads/2015/08/
DPATechInfo.pdf >.
[REF-1118]Dakshi Agrawal, Bruce Archambeault, Josyula R. Rao and Pankaj Rohatgi.
"The EM Side-Channel(s)". 2007 August 4. < https://link.springer.com/content/
pdf/10.1007/3-540-36400-5_4.pdf >.2023-04-07.
[REF-1119]Daniel Genkin, Adi Shamir and Eran Tromer. "RSA key extraction via
low-bandwidth acoustic cryptanalysis". 2014 June 3. < https://www.iacr.org/archive/
crypto2014/86160149/86160149.pdf >.
[REF-1120]Colin O'Flynn. "Power Analysis for Cheapskates". 2013 January 4. < https://
media.blackhat.com/eu-13/briefings/OFlynn/bh-eu-13-for-cheapstakes-oflynn-wp.pdf >.
[REF-1055]Peter Gutmann. "Data Remanence in Semiconductor Devices". 10th USENIX Security
Symposium. 2001 August. < https://www.usenix.org/legacy/events/sec01/full_papers/gutmann/
gutmann.pdf >.
[REF-1218]Graham Cluley. "This Black Box Can Brute Force Crack iPhone PIN Passcodes". The
Mac Security Blog. 2015 March 6. < https://www.intego.com/mac-security-blog/iphone-pin-passcode/
>.
[REF-1221]Victor Lomne and Thomas Roche. "A Side Journey to Titan". 2021 January 7. <
https://web.archive.org/web/20210107182441/https://ninjalab.io/wp-content/uploads/2021/01/
a_side_journey_to_titan.pdf >.2023-04-07.
[REF-1228]Gilbert Goodwill, Benjamin Jun, Josh Jaffe and Pankaj Rohatgi. "A testing methodology
for side-channel resistance validation". 2011. < https://csrc.nist.gov/csrc/media/events/noninvasive-
attack-testing-workshop/documents/08_goodwill.pdf >.
CWE Version 4.14
CWE-1301: Insufficient or Incomplete Data Removal within Hardware Component
CWE-1301: Insufficient or Incomplete Data Removal within Hardware Component