Cyber Resilience

CVE-2024-23170

Arm Mbed Tls 2.0.0 – 2.28.7

Published
31 January 2024
Modified
17 June 2026
Patch / advisory
CVSS Score v3.1 5.5
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score 0.0031 24th percentile
Risk Priority 42 floored blend · peak EPSS

Summary

CVE-2024-23170 is a medium-severity Observable Discrepancy (CWE-203) vulnerability in Arm Mbed Tls. Its CVSS base score is 5.5 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Data Obfuscation (T1001); ranked at the 24th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified map to IA-6 (Authentication Feedback) and SC-31 (Covert Channel Analysis) — see the control section below for these in your framework.

EU & UK References

Vulnerability Data

An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2. There was a timing side channel in RSA private operations. This side channel could be sufficient for a local attacker to recover the plaintext. It requires…

more

the attacker to send a large number of messages for decryption, as described in "Everlasting ROBOT: the Marvin Attack" by Hubert Kario.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise Techniques

T1001 Data Obfuscation Command And Control
Adversaries may obfuscate command and control traffic to make it more difficult to detect.
T1087 Account Discovery Discovery
Adversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised environment.
T1110 Brute Force Credential Access
Adversaries may use brute force techniques to gain access to accounts when passwords are unknown or when password hashes are obtained.
T1595 Active Scanning Reconnaissance
Adversaries may execute active reconnaissance scans to gather information that can be used during targeting.
Derived from this CVE’s CWE(s) via the direct CWE→ATT&CK cross-walk.

CVEs Like This One

CVE-2026-34877Same product: Arm Mbed Tls
CVE-2024-23775Same product: Arm Mbed Tls
CVE-2025-27809Same product: Arm Mbed Tls
CVE-2025-27810Same product: Arm Mbed Tls
CVE-2026-25835Same product: Arm Mbed Tls
CVE-2025-49087Same product: Trustedfirmware Mbed Tls
CVE-2023-43615Same product: Arm Mbed Tls
CVE-2025-66442Same product: Arm Mbed Tls
CVE-2026-34871Same product: Arm Mbed Tls
CVE-2023-49092Shared CWE-203, CWE-385

Affected Assets

arm
mbed tls
2.0.0 — 2.28.7
trustedfirmware
mbed tls
3.0.0 — 3.5.2

Mitigating Controls

Control response

Prevent
Stop it (NIST 800-53)

Detect
Catch it (NIST detect / respond)

Harden
Shrink the surface (DISA STIG)
  • 1 hardening rule · 1 OS baseline
Validate
Prove the fix (OWASP ASVS)

Mitigating Controls (NIST 800-53 r5) AI

Obscures authentication feedback so that success/failure differences are not observable to attackers.

Covert channel analysis directly identifies timing channels that could leak information.

Requires error messages to avoid revealing exploitable details, directly stopping observable response discrepancies.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.PS-06 mostly match
prevents

Secure SDLC practices directly prevent observable response discrepancies via consistent error handling and timing.

DE.CM-09 partial match
prevents

Runtime monitoring of hardware/software behavior can detect anomalous timing patterns that indicate covert channels.

ID.RA-01 partial match
prevents

Vulnerability identification processes can surface timing-channel weaknesses during design or code analysis.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

A.8.15 Logging partial match
degrades

Detailed logging can reveal timing anomalies but does not prevent covert timing channels.

finds

Continuous monitoring may detect timing-based exfiltration but does not eliminate the channel itself.

mitigates

Network segmentation reduces attack surface but does not address intra-process timing channels.

mitigates

Network segregation limits external timing observation but not internal covert timing.

prevents

Secure architecture principles can include timing-channel countermeasures but are not specific.

prevents

Secure coding guidelines may recommend constant-time algorithms but coverage is not guaranteed.

References