CVE-2024-4760

Published: May 16, 2024Modified: Jun 17, 2026Deferred

6.3

Vector

CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 0.4 / Impact: 5.9

Source: dc3f6da9-85b5-4a73-84a2-2ec90b40fca5 (Secondary)

Description

A voltage glitch during the startup of EEFC NVM controllers on Microchip SAM E70/S70/V70/V71, SAM G55, SAM 4C/4S/4N/4E, and SAM 3S/3N/3U microcontrollers allows access to the memory bus via the debug interface even if the security bit is set.

Related CWEs

CWE-1247

Improper Protection Against Voltage and Clock Glitches

The device does not contain or contains incorrectly implemented circuitry or sensors to detect and mitigate voltage and clock glitches and protect sensitive information or software contained on the device.

References (3)

https://ww1.microchip.com/downloads/aemDocuments/documents/MCU32/ProductDocuments/SupportingCollateral/Security-Advisory-CVE-2024-4760.pdf

Source: dc3f6da9-85b5-4a73-84a2-2ec90b40fca5

https://www.0x01team.com/hw_security/bypassing-microchip-atmel-sam-e70-s70-v70-v71-security/

Source: dc3f6da9-85b5-4a73-84a2-2ec90b40fca5

https://www.0x01team.com/hw_security/bypassing-microchip-atmel-sam-e70-s70-v70-v71-security/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.