Technical impact
Nordic Semiconductor IronSide SE for the nRF54H20 chip contains an algorithmic complexity flaw in all versions prior to 23.0.2+17. When the affected software processes certain inputs, it can consume excessive CPU or memory resources, potentially leading to denial‑of‑service conditions for the device or the network segment it serves. This weakness involves an algorithmic inefficiency classified as CWE‑407.
Affected Systems
The vulnerable product is Nordic Semiconductor IronSide SE running on the nRF54H20 microcontroller. Every release version dated before 23.0.2+17 applies; identifiers beyond the milestone are not specified in the advisory.
Risk and Exploitability
The CVSS score is 7.5, and the EPSS score is less than 1%, indicating a high severity but low likelihood of exploitation under current threat intelligence. The nature of the issue indicates significant risk if an attacker can supply crafted inputs. The likely attack vector is remote, via any channel that can trigger the complex algorithm, such as network services or firmware update interfaces. No active exploitation has been reported; however, the potential for severe resource exhaustion warrants prioritised mitigation.
