Low severity3.8NVD Advisory· Published Aug 10, 2021· Updated Jun 17, 2026

CVE-2020-25082

Description

An attacker with physical access to Nuvoton Trusted Platform Module (NPCT75x 7.2.x before 7.2.2.0) could extract an Elliptic Curve Cryptography (ECC) private key via a side-channel attack against ECDSA, because of an Observable Timing Discrepancy.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nuvoton/Npct75x Firmware
cpe:2.3:o:nuvoton:npct75x_firmware:*:*:*:*:*:*:*:*
Range: >=7.2.0,<7.2.2.0
Nuvoton/Trusted Platform Moduledescription
Nuvoton/Trusted Platform Modulellm-create
Range: <7.2.2.0

Patches

Vulnerability mechanics

References

www.nuvoton.com/support/product-related-information/security-advisories/sa-002/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.247
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000