PT-2024-14101 · Silicon+1 · Efr32Xg21B+2

Published 2024-01-03 · Updated 2024-09-27 · CVE-2023-5138

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Silicon Labs secure vault high parts EFx32xG2xB versions (except EFR32xG21B)

Description Glitch detection is not enabled by default for the CortexM33 core in the affected parts.

Recommendations For Silicon Labs secure vault high parts EFx32xG2xB (except EFR32xG21B), enable glitch detection to mitigate the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1319

CWE-909

Related Identifiers

CVE-2023-5138

Affected Products

Cortex-M33

Efr32Xg21B

Efx32Xg2Xb

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2023-5138 · Security Note
• https://osv.dev/vulnerability/CVE-2023-5138 · Vendor Advisory
• https://github.com/SiliconLabs/gecko_sdk · Note
• https://t.me/cvenotify/96367 · Telegram Post
• https://t.me/cvenotify/66137 · Telegram Post
• https://t.me/cibsecurity/74348 · Telegram Post
• https://twitter.com/CVEnew/status/1742677417263567144 · Twitter Post
• https://twitter.com/Esparta6108713/status/1742688014533611677 · Twitter Post
• https://community.silabs.com/069Vm0000004f6DIAQ · Note