CVE-2024-4760

Medium

Description

A voltage glitch during the startup of EEFC NVM controllers on Microchip SAM E70/S70/V70/V71, SAM G55, SAM 4C/4S/4N/4E, and SAM 3S/3N/3U microcontrollers allows access to the memory bus via the debug interface even if the security bit is set.

SeverityMedium
CVSS6.3
Exploit probability—
ProductSAME70
PublishedMay 16, 2024
First seenMay 16, 2024
Weakness typeCWE-1247CWE-1247

How to fix

Affected products

ProductAffected versionsFixed in
Microchip SAME700—
Microchip SAMS700—
Microchip SAMV700—
Microchip SAMV710—
Microchip SAMG550—
Microchip SAM4C0—
Microchip SAM4S0—
Microchip SAM4N0—
Microchip SAM4E0—
Microchip SAM3S0—
Microchip SAM3N0—
Microchip SAM3U0—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.