CVE-2024-4760: Voltage glitch during startup of the EEFC NVM controller can bypass the security bit

Published May 16, 2024
·
Updated

A voltage glitch during the startup of EEFC NVM controllers on Microchip SAM E70/S70/V70/V71, SAM G55, SAM 4C/4S/4N/4E, and SAM 3S/3N/3U microcontrollers allows access to the memory bus via the debug interface even if the security bit is set.

Affected Software

12 affected components
Microchip SAM E70
Microchip SAM S70
Microchip SAM V70
Microchip SAM V71
Microchip SAM G55
Microchip SAM 4C
Microchip SAM 4S
Microchip SAM 4N
Microchip SAM 4E
Microchip SAM 3S
Microchip SAM 3N
Microchip SAM 3U

Event History

May 16, 2024
CVE Published
via MITRE·01:07 PM
Data Sourced
via MITRE·01:07 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeakness

Frequently Asked Questions

1

What is the severity of CVE-2024-4760?

CVE-2024-4760 is considered a high severity vulnerability due to the potential unauthorized access to the memory bus.

2

How do I fix CVE-2024-4760?

To mitigate CVE-2024-4760, update to the latest firmware provided by Microchip that addresses this specific vulnerability.

3

What devices are affected by CVE-2024-4760?

CVE-2024-4760 affects Microchip SAM E70, S70, V70, and V71 microcontrollers.

4

What is the impact of CVE-2024-4760?

The impact of CVE-2024-4760 includes the potential for unauthorized data access and manipulation through the debug interface.

5

When was CVE-2024-4760 reported?

CVE-2024-4760 was reported in 2024, highlighting a critical hardware security flaw.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203