---
id: CVE-2026-89172
title: >-
  Improper protection of physical side channels vulnerability in Microchip
  AN1044, Microchip AN953, and Microchip SW300052.


  This issue affects AN1044: through A; AN953: through A; SW300052: through 2.6.
summary: >-
  Improper protection of physical side channels vulnerability in Microchip
  AN1044, Microchip AN953, and Microchip SW300052.


  This issue affects AN1044: through A; AN953: through A; SW300052: through 2.6.
severity: medium
cvss: 5.6
cvssVector: 'CVSS:4.0/AV:P/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N'
cwe:
  - CWE-1300
vendor: Microchip
product: AN1044
affected:
  - AN1044 <= A
  - AN953 <= A
  - SW300052 <= 2.6
published: '2026-09-12'
updated: '2026-09-16'
sourceUpdated: '2026-09-16T19:30:49.967'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-89172'
references:
  - url: 'https://www.microchip.com/en-us/application-notes/an1044'
    label: dc3f6da9-85b5-4a73-84a2-2ec90b40fca5
  - url: 'https://www.microchip.com/en-us/application-notes/an953'
    label: dc3f6da9-85b5-4a73-84a2-2ec90b40fca5
  - url: 'https://www.microchip.com/en-us/development-tool/sw300052'
    label: dc3f6da9-85b5-4a73-84a2-2ec90b40fca5
  - url: >-
      https://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/side-channel-attack-an1044-an953-sw300052-cryptographic-algorithms
    label: dc3f6da9-85b5-4a73-84a2-2ec90b40fca5
tags:
  - nvd
  - cve.org
epss: 0.00151
epssPercentile: 0.04599
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-09-14T12:55:05.158056Z'
cvssSource: cna
ingestedAt: '2026-09-14T15:23:07.429Z'
---

## Overview

Improper protection of physical side channels vulnerability in Microchip AN1044, Microchip AN953, and Microchip SW300052.

This issue affects AN1044: through A; AN953: through A; SW300052: through 2.6.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.