CVE-2023-4020
CRITICAL
9,0
Source: [email protected]
Attack Vector: local
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: changed
Confidentiality: high
Integrity: high
Availability: none
Description
AI Translation Available
An unvalidated input in a library function responsible for communicating between secure and non-secure memory in Silicon Labs TrustZone implementation allows reading/writing of memory in the secure region of memory from the non-secure region of memory.
EPSS (Exploit Prediction Scoring System)
Trend Analysis
EPSS (Exploit Prediction Scoring System)
Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.
EPSS Score
0,0022
Percentile
0,4th
Updated
EPSS Score Trend (Last 91 Days)
125
Out-of-bounds Read
DraftCommon Consequences
Security Scopes Affected:
Confidentiality
Availability
Other
Potential Impacts:
Read Memory
Bypass Protection Mechanism
Dos: Crash, Exit, Or Restart
Varies By Context
Applicable Platforms
Languages:
C, C++, Memory-Unsafe
Technologies:
ICS/OT
787
Out-of-bounds Write
DraftCommon Consequences
Security Scopes Affected:
Integrity
Availability
Other
Potential Impacts:
Modify Memory
Execute Unauthorized Code Or Commands
Dos: Crash, Exit, Or Restart
Unexpected State
Applicable Platforms
Languages:
Assembly, C, C++, Memory-Unsafe
Technologies:
ICS/OT
Application
Gecko Software Development Kit by Silabs
Version Range Affected
From
1.0.0
(inclusive)
To
4.4.0
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:silabs:gecko_software_development_kit:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://community.silabs.com/069Vm0000004b95IAA
https://github.com/SiliconLabs/gecko_sdk/releases
https://community.silabs.com/069Vm0000004b95IAA
https://github.com/SiliconLabs/gecko_sdk/releases