Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

Vulnerability IntelligenceCVE-2025-14972

CVE-2025-14972

MEDIUM4.1

Insufficient DPA countermeasure reseeding

Published May 15, 2026

Modified 1 months ago

Details

Countermeasures for DPA within SYMCRYPTO engine on SixG301xxx devices are not sufficiently random and will eventually repeat.
KSU keys using SYMCRYPTO will be impacted by this vulnerability.

References

https://community.silabs.com/068Vm00000M3cAX

https://www.cve.org/CVERecord?id=CVE-2025-14972

CVSS Analysis

CVSS v4.0

4.1

Exploitability

Attack Vector

PhysicalAV:P

Attack Complexity

HighAC:H

Attack Requirements

NoneAT:N

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Vulnerable System

Vuln. Confidentiality

HighVC:H

Vuln. Integrity

NoneVI:N

Vuln. Availability

NoneVA:N

Subsequent System

Subseq. Confidentiality

NoneSC:N

Subseq. Integrity

NoneSI:N

Subseq. Availability

NoneSA:N

4.1/CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Weakness Type (CWE)

Other

Ecosystems

Timeline

PublishedMay 15, 2026

ModifiedMay 15, 2026

CVE-2025-14972 | Mondoo Vulnerability Intelligence