PT-2023-27353 · Unknown · Trusted Firmware-M+1

Published 2023-09-07 · Updated 2024-11-27 · CVE-2023-40271

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Trusted Firmware-M versions TF-Mv1.6.0 through TF-Mv1.8.0

Description The issue arises when the CryptoCell PSA Driver software Interface is selected, and the Authenticated Encryption with Associated Data Chacha20-Poly1305 algorithm is used. In this scenario, the buffer comparison during the verification of the authentication tag does not happen on the full 16 bytes but just on the first 4 bytes. This leads to the possibility that unauthenticated payloads might be identified as authentic.

Recommendations For Trusted Firmware-M versions TF-Mv1.6.0 through TF-Mv1.8.0, consider updating to a version that fixes this issue, as the current implementation allows unauthenticated payloads to be identified as authentic due to incomplete buffer comparison during authentication tag verification. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-697

Related Identifiers

CVE-2023-40271

Affected Products

Cryptocell Psa Driver

Trusted Firmware-M

References · 9

• 🔥 https://git.trustedfirmware.org/TF-M/trusted-firmware-m.git/tree/docs/security/security_advisories/cc3xx_partial_tag_compare_on_chacha20_poly1305.rst · Exploit
• https://osv.dev/vulnerability/CVE-2023-40271 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-40271 · Security Note
• https://tf-m-user-guide.trustedfirmware.org/releases/index.html · Note
• https://t.me/cibsecurity/70124 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1700023753562878203 · Twitter Post
• https://t.me/cvenotify/102658 · Telegram Post
• https://t.me/cvenotify/57794 · Telegram Post
• https://twitter.com/CVEnew/status/1699971220148490638 · Twitter Post