Lucene search

K
cveDc3f6da9-85b5-4a73-84a2-2ec90b40fca5CVE-2024-4760
HistoryMay 16, 2024 - 1:15 p.m.

CVE-2024-4760

2024-05-1613:15:47
CWE-1247
dc3f6da9-85b5-4a73-84a2-2ec90b40fca5
web.nvd.nist.gov
26
voltage glitch
eefc nvm controllers
microchip
sam e70
sam s70
sam v70
sam v71
memory bus
debug interface
security bit

6.3 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

A voltage glitch during the startup of EEFC NVM controllers on Microchip SAM E70/S70/V70/V71 microcontrollers allows access to the memory bus via the debug interface even if the security bit is set.

CNA Affected

[
  {
    "defaultStatus": "affected",
    "product": "SAME70",
    "vendor": "Microchip",
    "versions": [
      {
        "status": "affected",
        "version": "0"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "SAMS70",
    "vendor": "Microchip",
    "versions": [
      {
        "status": "affected",
        "version": "0"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "SAMV70",
    "vendor": "Microchip",
    "versions": [
      {
        "status": "affected",
        "version": "0"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "SAMV71",
    "vendor": "Microchip",
    "versions": [
      {
        "status": "affected",
        "version": "0"
      }
    ]
  }
]

6.3 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Related for CVE-2024-4760