PT-2026-41300 · Unknown · Sixg301Xxx

Published 2026-05-15 · Updated 2026-05-18 · CVE-2025-14972

Positive Technologies (AI Summary)

CVSS v4.0

4.1

Medium

Base vector

AV:P/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions SixG301xxx (affected versions not specified)

Description Countermeasures for Differential Power Analysis (DPA)—a side-channel attack that analyzes power consumption to extract secret keys—within the SYMCRYPTO engine on SixG301xxx devices are not sufficiently random and will eventually repeat. This issue impacts KSU keys that utilize SYMCRYPTO.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-331

Related Identifiers

CVE-2025-14972

Affected Products

Sixg301Xxx

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-14972 · Security Note
• https://t.me/cveNotify/163917 · Telegram Post
• https://t.me/CVEtracker/53918 · Telegram Post
• https://community.silabs.com/068Vm00000M3cAX · Note