CVE-2024-4760 - OpenCVE

A voltage glitch during the startup of EEFC NVM controllers on Microchip SAM E70/S70/V70/V71 microcontrollers allows access to the memory bus via the debug interface even if the security bit is set.

No CVSS v4.0

Attack Vector Physical

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://www.0x01team.com/hw_security/bypassing-microchip-atmel-sam-e70-s70-v70-v71-security/

History

No history.

MITRE

Status: PUBLISHED

Assigner: Microchip

Published: 2024-05-16T13:07:57.462Z

Updated: 2024-08-01T20:47:41.757Z

Reserved: 2024-05-10T15:18:00.908Z

Link: CVE-2024-4760

Vulnrichment

Updated: 2024-08-01T20:47:41.757Z

NVD

Status : Awaiting Analysis

Published: 2024-05-16T13:15:47.893

Modified: 2024-05-16T15:44:44.683

Link: CVE-2024-4760

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-4760", "assignerOrgId": "dc3f6da9-85b5-4a73-84a2-2ec90b40fca5", "state": "PUBLISHED", "assignerShortName": "Microchip", "dateReserved": "2024-05-10T15:18:00.908Z", "datePublished": "2024-05-16T13:07:57.462Z", "dateUpdated": "2024-08-01T20:47:41.757Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "affected", "product": "SAME70", "vendor": "Microchip", "versions": [{"status": "affected", "version": "0"}]}, {"defaultStatus": "affected", "product": "SAMS70", "vendor": "Microchip", "versions": [{"status": "affected", "version": "0"}]}, {"defaultStatus": "affected", "product": "SAMV70", "vendor": "Microchip", "versions": [{"status": "affected", "version": "0"}]}, {"defaultStatus": "affected", "product": "SAMV71", "vendor": "Microchip", "versions": [{"status": "affected", "version": "0"}]}], "configurations": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Physical control of the VDDCore pins<br>"}], "value": "Physical control of the VDDCore pins"}], "credits": [{"lang": "en", "type": "finder", "value": "Waleed Alzamil"}, {"lang": "en", "type": "finder", "value": "Bandar Alharbi"}, {"lang": "en", "type": "finder", "value": "Meshari Alhammadi"}], "datePublic": "2024-05-16T13:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "A voltage glitch during the startup of EEFC NVM controllers on Microchip SAM E70/S70/V70/V71 microcontrollers allows access to the memory bus via the debug interface even if the security bit is set."}], "value": "A voltage glitch during the startup of EEFC NVM controllers on Microchip SAM E70/S70/V70/V71 microcontrollers allows access to the memory bus via the debug interface even if the security bit is set."}], "impacts": [{"capecId": "CAPEC-624", "descriptions": [{"lang": "en", "value": "CAPEC-624: Hardware Fault Injection"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "PHYSICAL", "availabilityImpact": "HIGH", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-1247", "description": "CWE-1247: Improper Protection Against Voltage and Clock Glitches", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "dc3f6da9-85b5-4a73-84a2-2ec90b40fca5", "shortName": "Microchip", "dateUpdated": "2024-05-16T19:23:55.521Z"}, "references": [{"tags": ["technical-description", "exploit"], "url": "https://www.0x01team.com/hw_security/bypassing-microchip-atmel-sam-e70-s70-v70-v71-security/"}], "source": {"advisory": "PSIRT-73", "discovery": "EXTERNAL"}, "timeline": [{"lang": "en", "time": "2024-02-15T17:19:00.000Z", "value": "Initial report"}], "title": "Voltage glitch during startup of the EEFC NVM controller can bypass the security bit", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-4760", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-05-24T19:22:40.820250Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:amtel:same70:*:*:*:*:*:*:*:*"], "vendor": "amtel", "product": "same70", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:amtel:sams70:*:*:*:*:*:*:*:*"], "vendor": "amtel", "product": "sams70", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:amtel:samv70:*:*:*:*:*:*:*:*"], "vendor": "amtel", "product": "samv70", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:amtel:samv71:*:*:*:*:*:*:*:*"], "vendor": "amtel", "product": "samv71", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:53:31.485Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T20:47:41.757Z"}, "title": "CVE Program Container", "references": [{"tags": ["technical-description", "exploit", "x_transferred"], "url": "https://www.0x01team.com/hw_security/bypassing-microchip-atmel-sam-e70-s70-v70-v71-security/"}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.0x01team.com/hw_security/bypassing-microchip-atmel-sam-e70-s70-v70-v71-security/", "tags": ["technical-description", "exploit", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T20:47:41.757Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-4760", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-05-24T19:22:40.820250Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:amtel:same70:*:*:*:*:*:*:*:*"], "vendor": "amtel", "product": "same70", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:amtel:sams70:*:*:*:*:*:*:*:*"], "vendor": "amtel", "product": "sams70", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:amtel:samv70:*:*:*:*:*:*:*:*"], "vendor": "amtel", "product": "samv70", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:amtel:samv71:*:*:*:*:*:*:*:*"], "vendor": "amtel", "product": "samv71", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-24T19:28:10.134Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "Voltage glitch during startup of the EEFC NVM controller can bypass the security bit", "source": {"advisory": "PSIRT-73", "discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Waleed Alzamil"}, {"lang": "en", "type": "finder", "value": "Bandar Alharbi"}, {"lang": "en", "type": "finder", "value": "Meshari Alhammadi"}], "impacts": [{"capecId": "CAPEC-624", "descriptions": [{"lang": "en", "value": "CAPEC-624: Hardware Fault Injection"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.3, "attackVector": "PHYSICAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Microchip", "product": "SAME70", "versions": [{"status": "affected", "version": "0"}], "defaultStatus": "affected"}, {"vendor": "Microchip", "product": "SAMS70", "versions": [{"status": "affected", "version": "0"}], "defaultStatus": "affected"}, {"vendor": "Microchip", "product": "SAMV70", "versions": [{"status": "affected", "version": "0"}], "defaultStatus": "affected"}, {"vendor": "Microchip", "product": "SAMV71", "versions": [{"status": "affected", "version": "0"}], "defaultStatus": "affected"}], "timeline": [{"lang": "en", "time": "2024-02-15T17:19:00.000Z", "value": "Initial report"}], "datePublic": "2024-05-16T13:00:00.000Z", "references": [{"url": "https://www.0x01team.com/hw_security/bypassing-microchip-atmel-sam-e70-s70-v70-v71-security/", "tags": ["technical-description", "exploit"]}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "A voltage glitch during the startup of EEFC NVM controllers on Microchip SAM E70/S70/V70/V71 microcontrollers allows access to the memory bus via the debug interface even if the security bit is set.", "supportingMedia": [{"type": "text/html", "value": "A voltage glitch during the startup of EEFC NVM controllers on Microchip SAM E70/S70/V70/V71 microcontrollers allows access to the memory bus via the debug interface even if the security bit is set.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1247", "description": "CWE-1247: Improper Protection Against Voltage and Clock Glitches"}]}], "configurations": [{"lang": "en", "value": "Physical control of the VDDCore pins", "supportingMedia": [{"type": "text/html", "value": "Physical control of the VDDCore pins<br>", "base64": false}]}], "providerMetadata": {"orgId": "dc3f6da9-85b5-4a73-84a2-2ec90b40fca5", "shortName": "Microchip", "dateUpdated": "2024-05-16T19:23:55.521Z"}}}, "cveMetadata": {"cveId": "CVE-2024-4760", "state": "PUBLISHED", "dateUpdated": "2024-08-01T20:47:41.757Z", "dateReserved": "2024-05-10T15:18:00.908Z", "assignerOrgId": "dc3f6da9-85b5-4a73-84a2-2ec90b40fca5", "datePublished": "2024-05-16T13:07:57.462Z", "assignerShortName": "Microchip"}, "dataVersion": "5.1"}