cve.bz

CVE-2020-25082

3.8 lowEPSS 0.2%

Low (3.8) in nuvoton npct75x firmware. EPSS 0.2% chance of exploitation in the next 30 days.

An attacker with physical access to Nuvoton Trusted Platform Module (NPCT75x 7.2.x before 7.2.2.0) could extract an Elliptic Curve Cryptography (ECC) private key via a side-channel attack against ECDSA, because of an Observable Timing Discrepancy.

Severity

CVSS 3.1

3.8 low
CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
EPSS
0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
CWE
CWE-203
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON