Lucene search

K
cvelistMicrochipCVELIST:CVE-2024-4760
HistoryMay 16, 2024 - 1:07 p.m.

CVE-2024-4760 Voltage glitch during startup of the EEFC NVM controller can bypass the security bit

2024-05-1613:07:57
CWE-1247
Microchip
www.cve.org
1
cve-2024
voltage glitch
eefc nvm controller
microchip sam
memory bus
debug interface
security bypass

6.3 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

A voltage glitch during the startup of EEFC NVM controllers on Microchip SAM E70/S70/V70/V71 microcontrollers allows access to the memory bus via the debug interface even if the security bit is set.

CNA Affected

[
  {
    "defaultStatus": "affected",
    "product": "SAME70",
    "vendor": "Microchip",
    "versions": [
      {
        "status": "affected",
        "version": "0"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "SAMS70",
    "vendor": "Microchip",
    "versions": [
      {
        "status": "affected",
        "version": "0"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "SAMV70",
    "vendor": "Microchip",
    "versions": [
      {
        "status": "affected",
        "version": "0"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "SAMV71",
    "vendor": "Microchip",
    "versions": [
      {
        "status": "affected",
        "version": "0"
      }
    ]
  }
]

6.3 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for CVELIST:CVE-2024-4760