CVE-2020-12402
MEDIUMDescription
During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which entailed significantly input-dependent flow. This allowed an attacker able to perform electromagnetic-based side channel attacks to record traces leading to the recovery of the secret primes. *Note:* An unmodified Firefox browser does not generate RSA keys in normal operation and is not affected, but products built on top of it might. This vulnerability affects Firefox < 78.
How to fix
Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.
CVSS v3 Vector
Exploitability
Impact
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N
Exploit Intelligence
Low risk: more likely to be exploited than 26% of all known CVEs.
References
Related Vulnerabilities
Other CWE-203 vulnerabilities, ordered by exploit likelihood. View all
| CVE | Severity | CVSS | EPSS | Exploited | Fix |
|---|---|---|---|---|---|
| CVE-2017-5753 | Medium | 5.6 | 94% | - | Fix |
| CVE-2003-0190 | Medium | 5.0 | 77% | - | Fix |
| CVE-2017-5715 | Medium | 5.6 | 74% | - | Fix |
| CVE-2018-3639 | Medium | 5.5 | 61% | - | Fix |
| CVE-2023-28770 | High | 7.5 | 58% | - | Fix |
| CVE-2004-1602 | Medium | 5.0 | 31% | - | - |
Embed a live status badge for CVE-2020-12402
Markdown
[](https://tridentstack.com/cve/CVE-2020-12402)HTML
<a href="https://tridentstack.com/cve/CVE-2020-12402"><img src="https://tridentstack.com/cve/badge/CVE-2020-12402.svg" alt="CVE-2020-12402"></a>Find and fix vulnerabilities across your fleet
TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.
Start freeThis product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2024-11-21.