CVE-2026-89172
Received Received - Intake

Improper Physical Side Channel Protection in Microchip AN1044

Vulnerability report for CVE-2026-89172, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-09-12

Last updated on: 2026-09-12

Assigner: Microchip Technology

Description

Improper protection of physical side channels vulnerability in Microchip AN1044, Microchip AN953, and Microchip SW300052. This issue affects AN1044: through A; AN953: through A; SW300052: through 2.6.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-12
Last Modified
2026-09-12
Generated
2026-09-12
AI Q&A
2026-09-12
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
microchip an1044 *
microchip an953 *
microchip sw300052 to 2.6 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1300 The device does not contain sufficient protection mechanisms to prevent physical side channels from exposing sensitive information due to patterns in physically observable phenomena such as variations in power consumption, electromagnetic emissions (EME), or acoustic emissions.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves improper protection of physical side channels in Microchip AN1044, AN953, and SW300052. It allows attackers to exploit physical implementation flaws to extract sensitive information.

Impact Analysis

An attacker could use this flaw to gain unauthorized access to sensitive data by monitoring physical side channels like power consumption or electromagnetic emissions from affected Microchip devices.

Compliance Impact

The vulnerability involves improper protection of physical side channels in specific Microchip products. This could potentially lead to unauthorized access or data leakage, which may impact compliance with standards requiring physical security controls, such as GDPR's data protection measures or HIPAA's safeguards for protected health information.

Mitigation Strategies

Update affected Microchip products (AN1044, AN953, SW300052) to versions beyond the specified affected ranges. Apply physical security measures to protect against side-channel attacks.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-89172. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart