PT-2024-20702 · Unknown · Series 2 Hse-Svh

Published 2024-08-29 · Updated 2024-08-30 · CVE-2024-2502

Positive Technologies (AI Summary)

CVSS v3.1

2.0

Low

Base vector

AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Series 2 HSE-SVH devices versions prior to SE Firmware version 2.2.6

Description The issue arises because the TAMPERRSTCAUSE register may not be properly updated when a level 4 tamper event occurs, potentially preventing the application from blocking boot attempts after consecutive tamper resets as expected. This affects Series 2 HSE-SVH devices, including xG23B, xG24B, xG25B, and xG28B.

Recommendations For Series 2 HSE-SVH devices, upgrade to SE Firmware version 2.2.6 or later to resolve the issue.

Fix

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

CVE-2024-2502

Affected Products

Series 2 Hse-Svh

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2024-2502 · Security Note
• https://community.silabs.com/sfc/servlet.shepherd/document/download/069Vm00000BYb5HIAT?operationContext=S1 · Vendor Advisory
• https://t.me/cvedetector/4482 · Telegram Post