CVE-2024-4760
Assigner: Microchip
Published: 2024-05-16T13:07:57.462Z
State: PUBLISHED
affected: defaultStatus: affected
product: SAME70
vendor: Microchip
versions: status: affected
version: 0
defaultStatus: affected
product: SAMS70
vendor: Microchip
versions: status: affected
version: 0
defaultStatus: affected
product: SAMV70
vendor: Microchip
versions: status: affected
version: 0
defaultStatus: affected
product: SAMV71
vendor: Microchip
versions: status: affected
version: 0
configurations: supportingMedia: base64: no
type: text/html
value: Physical control of the VDDCore pins<br>
value: Physical control of the VDDCore pins
credits: type: finder
value: Waleed Alzamil
type: finder
value: Bandar Alharbi
type: finder
value: Meshari Alhammadi
datePublic: 2024-05-16T13:00:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: A voltage glitch during the startup of EEFC NVM controllers on Microchip SAM E70/S70/V70/V71 microcontrollers allows access to the memory bus via the debug interface even if the security bit is set.
value: A voltage glitch during the startup of EEFC NVM controllers on Microchip SAM E70/S70/V70/V71 microcontrollers allows access to the memory bus via the debug interface even if the security bit is set.
impacts: capecId: CAPEC-624
descriptions: value: CAPEC-624: Hardware Fault Injection
metrics: cvssV3_1: attackComplexity: HIGH
attackVector: PHYSICAL
availabilityImpact: HIGH
baseScore: 6.3
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-1247
description: CWE-1247: Improper Protection Against Voltage and Clock Glitches
type: CWE
source: advisory: PSIRT-73
discovery: EXTERNAL
timeline: time: 2024-02-15T17:19:00.000Z
value: Initial report
title: Voltage glitch during startup of the EEFC NVM controller can bypass the security bit
x_generator: engine: Vulnogram 0.1.0-dev