title: Silicon Labs EFR32xxx parts with classic key storage do not use hardware accelerated AES-CCM
description: Ember ZNet between v7.2.0 and v7.4.0 used software AES-CCM instead of integrated hardware cryptographic accelerators, potentially increasing risk of electromagnetic and differential power analysis sidechannel attacks.
problem types: CWE-327 Use of a Broken or Risky Cryptographic Algorithm
affected:
{
defaultStatus: unaffected
packageName: Ember ZNet SDK
platforms: [32 bit, ARM]
product: Ember ZNet SDK
repo: https://github.com/SiliconLabs/gecko_sdk/releases
vendor: silabs.com
versions:
lessThan: 7.4.0, status: affected, version: 7.2.0, versionType: 7.x
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 6.2
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL