CVE-2023-5138: Glitch detection not active by default in Silicon Labs Secure Vault High devices
Published Jan 3, 2024
·Updated
Glitch detection is not enabled by default for the CortexM33 core in Silicon Labs secure vault high parts EFx32xG2xB, except EFR32xG21B.
Affected Software
1 affected component
Silabs Gecko Software Development Kit>=1.0.0<4.4.0
Event History
Jan 3, 2024
CVE Published
10:31 PM
Data Sourced
10:31 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-5138?
CVE-2023-5138 has a medium severity rating as it relates to a potential security risk in the CortexM33 core when glitch detection is not enabled.
2
How do I fix CVE-2023-5138?
To mitigate CVE-2023-5138, ensure that glitch detection is enabled in your software configuration for affected devices.
3
Which devices are affected by CVE-2023-5138?
CVE-2023-5138 affects the Silicon Labs secure vault high parts EFx32xG2xB, excluding the EFR32xG21B.
4
What is glitch detection in relation to CVE-2023-5138?
Glitch detection is a security feature that helps protect against voltage and clock manipulation attacks on CortexM33 core devices.
5
What versions of the Gecko SDK are impacted by CVE-2023-5138?
CVE-2023-5138 affects versions of the Gecko SDK from 1.0.0 to 4.4.0, except the specified version for EFR32xG21B.