SYMCRYPTO is the host side hardware engine on SiXG301 devices, accelerated by the PSA crypto library for symmetric encryption and hashing. The DPA countermeasures implemented in SYMCRYPTO can be weakened by forcing particular seed values when an attacker has gained code execution on the device. This reduction in entropy allows the cryptographic keys loaded onto SYMCRYPTO to become more susceptible to extraction through differential power analysis attacks than originally intended.

The vulnerability affects devices running the Simplicity SDK on the SiXG301 Series 3 family. No specific version ranges are enumerated in the available data, so any device using the affected firmware snapshot is potentially impacted.

The CVSS score of 7.1 indicates a high severity, but the EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector requires local or remote code execution to manipulate the seed values that influence the DPA countermeasures. Once those countermeasures are reduced, an attacker can perform side‑channel key extraction attacks more feasibly, compromising the confidentiality of the cryptographic keys stored on the device.