Lucene search
+L

CVE-2025-9231 Timing side-channel in SM2 algorithm on 64 bit ARM

🗓️ 30 Sep 2025 13:17:12Reported by opensslType 
vulnrichment
 vulnrichment
🔗 github.com👁 4 Views

A timing side-channel in SM2 on 64-bit ARM could allow remote recovery of the private key.

Related
Affected
Refs
[
  {
    "vendor": "Siemens",
    "product": "RUGGEDCOM RST2428P",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.3",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "RUGGEDCOM RST2428P",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V4.0",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.3",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XCH328",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.3",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XCM324",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.3",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XCM328",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.3",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XCM332",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.3",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRH334 (24 V DC, 8xFO, CC)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.3",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (230 V AC, 12xFO)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.3",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (230 V AC, 8xFO)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.3",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.3",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (24 V DC, 12xFO)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.3",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (24 V DC, 8xFO)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.3",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.3",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (2x230 V AC, 12xFO)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.3",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (2x230 V AC, 8xFO)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.3",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.3",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIDIS Secured SmartPlug",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V7.26.0310",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC CN 4100",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V5.0",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

30 Sep 2025 13:17Current
6.3Medium risk
Vulners AI Score6.3
EPSS0.02242
SSVC
4