CVE-2024-9413 - Vulnerability Details - OpenCVE

The transport_message_handler function in SCP-Firmware release versions 2.11.0-2.15.0 does not properly handle errors, potentially allowing an Application Processor (AP) to cause a buffer overflow in System Control Processor (SCP) firmware.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00157.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Arm	Scp-firmware

No data.

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://developer.arm.com/Arm%20Security%20Center/SCP-Firmware%20Vulnerability

History

Wed, 27 Nov 2024 16:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Arm Arm scp-firmware
CPEs		cpe:2.3:o:arm:scp-firmware::::::::
Vendors & Products		Arm Arm scp-firmware
Metrics		cvssV3_1 `{'score': 8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Wed, 13 Nov 2024 16:30:00 +0000

Type	Values Removed	Values Added
Description		The transport_message_handler function in SCP-Firmware release versions 2.11.0-2.15.0 does not properly handle errors, potentially allowing an Application Processor (AP) to cause a buffer overflow in System Control Processor (SCP) firmware.
Weaknesses		CWE-755
References		https://developer.arm.com/Arm%20Security%20Center/SCP-Firmware%20Vulnerability

MITRE

Status: PUBLISHED

Assigner: Arm

Published: 2024-11-13T16:09:26.331Z

Updated: 2024-11-27T15:35:14.153Z

Reserved: 2024-10-01T17:18:17.019Z

Link: CVE-2024-9413

Vulnrichment

Updated: 2024-11-27T15:34:07.353Z

NVD

Status : Awaiting Analysis

Published: 2024-11-13T17:15:12.660

Modified: 2024-11-27T16:15:15.180

Link: CVE-2024-9413

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-9413", "assignerOrgId": "56a131ea-b967-4a0d-a41e-5f3549952846", "state": "PUBLISHED", "assignerShortName": "Arm", "dateReserved": "2024-10-01T17:18:17.019Z", "datePublished": "2024-11-13T16:09:26.331Z", "dateUpdated": "2024-11-27T15:35:14.153Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "SCP-Firmware", "vendor": "Arm", "versions": [{"lessThanOrEqual": "2.15.0", "status": "affected", "version": "2.11.0", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "The transport_message_handler function in SCP-Firmware release versions 2.11.0-2.15.0 does not properly handle errors, potentially allowing an Application Processor (AP) to cause a buffer overflow in System Control Processor (SCP) firmware.<br>"}], "value": "The transport_message_handler function in SCP-Firmware release versions 2.11.0-2.15.0 does not properly handle errors, potentially allowing an Application Processor (AP) to cause a buffer overflow in System Control Processor (SCP) firmware."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-755", "description": "CWE-755 Improper Handling of Exceptional Conditions", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "56a131ea-b967-4a0d-a41e-5f3549952846", "shortName": "Arm", "dateUpdated": "2024-11-13T16:09:26.331Z"}, "references": [{"url": "https://developer.arm.com/Arm%20Security%20Center/SCP-Firmware%20Vulnerability"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"affected": [{"vendor": "arm", "product": "scp-firmware", "cpes": ["cpe:2.3:o:arm:scp-firmware:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "versions": [{"version": "2.11.0", "status": "affected", "lessThanOrEqual": "2.15.0", "versionType": "semver"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-11-27T15:31:53.988809Z", "id": "CVE-2024-9413", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-27T15:35:14.153Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-9413", "assignerOrgId": "56a131ea-b967-4a0d-a41e-5f3549952846", "state": "PUBLISHED", "assignerShortName": "Arm", "dateReserved": "2024-10-01T17:18:17.019Z", "datePublished": "2024-11-13T16:09:26.331Z", "dateUpdated": "2024-11-27T15:35:14.153Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "SCP-Firmware", "vendor": "Arm", "versions": [{"lessThanOrEqual": "2.15.0", "status": "affected", "version": "2.11.0", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "The transport_message_handler function in SCP-Firmware release versions 2.11.0-2.15.0 does not properly handle errors, potentially allowing an Application Processor (AP) to cause a buffer overflow in System Control Processor (SCP) firmware.<br>"}], "value": "The transport_message_handler function in SCP-Firmware release versions 2.11.0-2.15.0 does not properly handle errors, potentially allowing an Application Processor (AP) to cause a buffer overflow in System Control Processor (SCP) firmware."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-755", "description": "CWE-755 Improper Handling of Exceptional Conditions", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "56a131ea-b967-4a0d-a41e-5f3549952846", "shortName": "Arm", "dateUpdated": "2024-11-13T16:09:26.331Z"}, "references": [{"url": "https://developer.arm.com/Arm%20Security%20Center/SCP-Firmware%20Vulnerability"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-9413", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-11-27T15:31:53.988809Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:arm:scp-firmware:*:*:*:*:*:*:*:*"], "vendor": "arm", "product": "scp-firmware", "versions": [{"status": "affected", "version": "2.11.0", "versionType": "semver", "lessThanOrEqual": "2.15.0"}], "defaultStatus": "unaffected"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-27T15:34:07.353Z"}}]}}