Lucene search
SilabsCVELIST:CVE-2022-24936HistoryNov 02, 2022 - 5:25 p.m.
CVE-2022-24936 Gecko Standalone Bootloader vulnerability may allow bypassing application secure boot in some Series 2 devices
2022-11-0217:25:38
CWE-119
Silabs
www.cve.org
7
cve-2022-24936
gecko standalone bootloader
standalone bootloader vulnerability
out-of-bounds error
gbl parser
silicon labs
gecko bootloader
flash sign key
ota decryption key
malicious bootloader upgrade
bypassing secure boot
series 2 devices.
CVSS3
8.3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
AI Score
9.3
Confidence
High
EPSS
0.001
Percentile
46.4%
Out-of-Bounds error in GBL parser in Silicon Labs Gecko Bootloader version 4.0.1 and earlier allows attacker to overwrite flash Sign key and OTA decryption key via malicious bootloader upgrade.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Gecko Bootloader",
"vendor": "silabs.com",
"versions": [
{
"lessThanOrEqual": "4.0.1",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
]Related
nvd
nvd
CVE-2022-24936
2022-11-02 18:15:10
cve
cve
CVE-2022-24936
2022-11-02 18:15:10
prion
prion
Design/Logic Flaw
2022-11-02 18:15:00
CVSS3
8.3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
AI Score
9.3
Confidence
High
EPSS
0.001
Percentile
46.4%
Related for CVELIST:CVE-2022-24936