Lucene search
HistoryNov 02, 2022 - 6:15 p.m.
CVE-2022-24936
gbl parser
silicon labs gecko bootloader
out-of-bounds error
flash sign key
ota decryption key
malicious upgrade
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
EPSS
0.001
Percentile
46.4%
Out-of-Bounds error in GBL parser in Silicon Labs Gecko Bootloader version 4.0.1 and earlier allows attacker to overwrite flash Sign key and OTA decryption key via malicious bootloader upgrade.
Affected configurations
Node
silabsgecko_bootloaderRange≤4.0.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| silabs | gecko_bootloader | * | cpe:2.3:a:silabs:gecko_bootloader:*:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2022-11-02 18:15:00
cvelist
cvelist
cve
cve
CVE-2022-24936
2022-11-02 18:15:10
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
EPSS
0.001
Percentile
46.4%
Related for NVD:CVE-2022-24936