CVE-2022-24936

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-24936
Out-of-Bounds error in GBL parser in Silicon Labs Gecko Bootloader version 4.0.1 and earlier allows attacker to overwrite flash Sign key and OTA decryption key via malicious bootloader upgrade.

8.3 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.5

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000Gdop4QAB?operationContext=S1 Permissions Required Vendor Advisory
https://github.com/SiliconLabs/gecko_sdk/blame/2e82050dc8823c9fe0e8908c1b2666fb83056230/platform/bootloader/core/btl_bootload.c Exploit Third Party Advisory
https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000Gdop4QAB?operationContext=S1 Permissions Required Vendor Advisory
https://github.com/SiliconLabs/gecko_sdk/blame/2e82050dc8823c9fe0e8908c1b2666fb83056230/platform/bootloader/core/btl_bootload.c Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:silabs:gecko_bootloader:*:*:*:*:*:*:*:*
History

21 Nov 2024, 06:51

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 9.1 		v2 : unknown
v3 : 8.3
References () https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000Gdop4QAB?operationContext=S1 - Permissions Required, Vendor Advisory () https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000Gdop4QAB?operationContext=S1 - Permissions Required, Vendor Advisory
References () https://github.com/SiliconLabs/gecko_sdk/blame/2e82050dc8823c9fe0e8908c1b2666fb83056230/platform/bootloader/core/btl_bootload.c - Exploit, Third Party Advisory () https://github.com/SiliconLabs/gecko_sdk/blame/2e82050dc8823c9fe0e8908c1b2666fb83056230/platform/bootloader/core/btl_bootload.c - Exploit, Third Party Advisory

03 Nov 2022, 16:41

Type Values Removed Values Added
References (MISC) https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000Gdop4QAB?operationContext=S1 - (MISC) https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000Gdop4QAB?operationContext=S1 - Permissions Required, Vendor Advisory
References (MISC) https://github.com/SiliconLabs/gecko_sdk/blame/2e82050dc8823c9fe0e8908c1b2666fb83056230/platform/bootloader/core/btl_bootload.c - (MISC) https://github.com/SiliconLabs/gecko_sdk/blame/2e82050dc8823c9fe0e8908c1b2666fb83056230/platform/bootloader/core/btl_bootload.c - Exploit, Third Party Advisory
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.1
CPE cpe:2.3:a:silabs:gecko_bootloader:*:*:*:*:*:*:*:*
CWE CWE-787

02 Nov 2022, 19:02

Type Values Removed Values Added
New CVE
Information

Published : 2022-11-02 18:15

Updated : 2024-11-21 06:51

NVD link : CVE-2022-24936

Mitre link : CVE-2022-24936

CVE.ORG link : CVE-2022-24936

JSON object : View

Products Affected

silabs

  • gecko_bootloader
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-787

Out-of-bounds Write