521
discover which memory locations the routine accessed by measuring the time it takes for their own
memory accesses to complete.
Observed Examples
Reference Description
CVE-2020-8695 Observable discrepancy in the RAPL interface for some Intel processors
allows information disclosure.
https://www.cve.org/CVERecord?id=CVE-2020-8695
CVE-2019-14353 Crypto hardware wallet's power consumption relates to total number of
pixels illuminated, creating a side channel in the USB connection that allows
attackers to determine secrets displayed such as PIN numbers and passwords
https://www.cve.org/CVERecord?id=CVE-2019-14353
CVE-2019-10071 Java-oriented framework compares HMAC signatures using String.equals()
instead of a constant-time algorithm, causing timing discrepancies
https://www.cve.org/CVERecord?id=CVE-2019-10071
CVE-2002-2094 This, and others, use ".." attacks and monitor error responses, so there is
overlap with directory traversal.
https://www.cve.org/CVERecord?id=CVE-2002-2094
CVE-2001-1483 Enumeration of valid usernames based on inconsistent responses
https://www.cve.org/CVERecord?id=CVE-2001-1483
CVE-2001-1528 Account number enumeration via inconsistent responses.
https://www.cve.org/CVERecord?id=CVE-2001-1528
CVE-2004-2150 User enumeration via discrepancies in error messages.
https://www.cve.org/CVERecord?id=CVE-2004-2150
CVE-2005-1650 User enumeration via discrepancies in error messages.
https://www.cve.org/CVERecord?id=CVE-2005-1650
CVE-2004-0294 Bulletin Board displays different error messages when a user exists or not,
which makes it easier for remote attackers to identify valid users and conduct a
brute force password guessing attack.
https://www.cve.org/CVERecord?id=CVE-2004-0294
CVE-2004-0243 Operating System, when direct remote login is disabled, displays a different
message if the password is correct, which allows remote attackers to guess
the password via brute force methods.
https://www.cve.org/CVERecord?id=CVE-2004-0243
CVE-2002-0514 Product allows remote attackers to determine if a port is being filtered because
the response packet TTL is different than the default TTL.
https://www.cve.org/CVERecord?id=CVE-2002-0514
CVE-2002-0515 Product sets a different TTL when a port is being filtered than when it is
not being filtered, which allows remote attackers to identify filtered ports by
comparing TTLs.
https://www.cve.org/CVERecord?id=CVE-2002-0515
CVE-2002-0208 Product modifies TCP/IP stack and ICMP error messages in unusual ways that
show the product is in use.
https://www.cve.org/CVERecord?id=CVE-2002-0208
CVE-2004-2252 Behavioral infoleak by responding to SYN-FIN packets.
https://www.cve.org/CVERecord?id=CVE-2004-2252
CVE-2001-1387 Product may generate different responses than specified by the administrator,
possibly leading to an information leak.
https://www.cve.org/CVERecord?id=CVE-2001-1387
CVE-2004-0778 Version control system allows remote attackers to determine the existence of
arbitrary files and directories via the -X command for an alternate history file,
which causes different error messages to be returned.
https://www.cve.org/CVERecord?id=CVE-2004-0778
CWE Version 4.14
CWE-203: Observable Discrepancy
CWE-203: Observable Discrepancy