CWE-1300 类弱点 35 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-1300指设备缺乏对物理侧信道攻击的有效防护。攻击者通过监测功耗、电磁辐射或声学发射等可观察现象，分析数据模式以推断敏感信息。开发者应实施屏蔽、噪声注入或恒定时间算法等机制，消除物理特征与数据间的关联，从而防止侧信道泄露，确保硬件层面的信息安全。
As each character of
the PIN number is entered, a correct character
exhibits one current pulse shape while an
incorrect character exhibits a different current
pulse shape.Rather than comparing
each character to the correct PIN value as it is
entered, the device could accumulate the PIN in a
register, and do the comparison all at once at the
end. Alternatively, the components for the
comparison could be modified so that the current
pulse shape is the same regardless of the
correctness of the entered
character.The local method of extracting the secret key consists of plugging the key into a USB port and using electromagnetic (EM) sniffing tools and computers.Several solutions could have been considered by the manufacturer. For example, the manufacturer could shield the circuitry in the key or add randomized delays, indirect calculations with random values involved, or randomly ordered calculations to make extraction much more difficult. The manufacturer could use a combination of these techniques.CWE-1300 是常见的弱点类别，本平台收录该类弱点关联的 35 条 CVE 漏洞。